D-Link xStack DGS-3120 Series Cli Reference Manual Download | Manualshive

Page: 1146 / 1150

background image

xStack

®

DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide

1141

Appendix D

RADIUS Attributes

Assignment

The RADIUS Attributes Assignment on the Switch is used in the following modules: 802.1X (Port-
based and Host-based), MAC-based Access Control, Web-based Access Control (WAC) and
Japanese Web-based Access Control (JWAC).

The description that follows explains the following RADIUS Attributes Assignment types:

•

Ingress/Egress Bandwidth

•

802.1p Default Priority

•

VLAN

•

ACL

To assign

Ingress/Egress bandwidth by RADIUS Server

, the proper parameters should be

configured on the RADIUS Server. The tables below show the parameters for bandwidth.

The parameters of the Vendor-Specific attributes are:

Vendor-Specific Attribute

Description

Value

Usage

Vendor-ID

Defines the vendor.

171 (DLINK)

Required

Vendor-Type

Defines the attribute.

2 (for ingress bandwidth)

3 (for egress bandwidth)

Required

Attribute-Specific Field

Used to assign the bandwidth
of a port.

Unit (Kbits)

Required

If the user has configured the bandwidth attribute of the RADIUS server (for example, ingress
bandwidth 1000Kbps) and the 802.1X authentication is successful, the device will assign the
bandwidth (according to the RADIUS server) to the port. However, if the user does not configure
the bandwidth attribute and authenticates successfully, the device will not assign any bandwidth to
the port. If the bandwidth attribute is configured on the RADIUS server as "0", the effective
bandwidth will be set "no_limited", and if the bandwidth is configured lower than 0 or higher than
maximum supported value, the bandwidth will be ignored.

To assign

802.1p default priority by RADIUS Server

, the proper parameters should be

configured on the RADIUS Server. The tables below show the parameters for 802.1p default
priority.

The parameters of the Vendor-Specific attributes are:

Vendor-Specific Attribute

Description

Value

Usage

Vendor-ID

Defines the vendor.

171 (DLINK)

Required

Vendor-Type

Defines the attribute.

4

Required

«
...
1144
1145
1146
1147
1148
...
»

Summary of Contents for xStack DGS-3120 Series

Page 1: ......

Page 2: ...guration Command List 193 Chapter 18 Configuration Trap Command List 198 Chapter 19 Connectivity Fault Management CFM Command List RI and EI Mode Only 200 Chapter 20 Connectivity Fault Management CFM...

Page 3: ...7 Chapter 50 Jumbo Frame Command List 541 Chapter 51 Layer 2 Protocol Tunneling L2PT Command List 543 Chapter 52 Link Aggregation Command List 547 Chapter 53 Link Layer Discovery Protocol LLDP Command...

Page 4: ...er 86 Remote Switched Port ANalyzer RSPAN Command List 855 Chapter 87 Routing Information Protocol RIP Command List RI Mode Only 861 Chapter 88 RIPng Command List RI Mode Only 866 Chapter 89 Routing C...

Page 5: ...hapter 114 Trusted Host Command List 1054 Chapter 115 UDP Helper Command List 1058 Chapter 116 Virtual Router Redundancy Protocol VRRP Command List RI Mode Only 1063 Chapter 117 VLAN Counter Command L...

Page 6: ...ch via the Serial Port The Switch s serial port s default settings are as follows 115200 baud no parity 8 data bits 1 stop bit A computer running a terminal emulation program capable of emulating a VT...

Page 7: ...00 501 Power On Self Test 100 MAC Address 10 BF 48 D0 E0 E0 H W Version B1 Please Wait Loading V4 00 015 Runtime Image 100 UART init 100 Starting runtime image Device Discovery The Switch s MAC addres...

Page 8: ...via Telnet SNMP MIB browser and the CLI or via the Web based management agent using the above IP address to connect to the Switch There are a number of helpful features included in the CLI Entering t...

Page 9: ...appear at the command prompt DGS 3120 24TC admin config account Command config account Next possible completions username 15 DGS 3120 24TC admin config account In the above example the command config...

Page 10: ...aaa access_profile account accounting acct_client address_binding arp_spoofing_prevention arpentry asymmetric_vlan attack_log auth_client auth_diagnostics auth_session_statistics auth_statistics authe...

Page 11: ...in In the above example all of the possible next parameters for the show command are displayed At the next command prompt the up arrow was used to re enter the show command followed by the account par...

Page 12: ...he legal range of the metric value 1 4 Line Editing Keys Keys Description Delete Delete character under cursor and shift remainder of line to left Backspace Delete character to left of cursor and shif...

Page 13: ...copper speed auto capability_advertised 10_half 10_full 100_half 100_full 1000_full 10_half 10_full 100_half 100_full 1000_full master slave auto_negotiation restart_an remote_fault_advertised disabl...

Page 14: ...This command is used to display the current serial port settings Format show serial_port Parameters None Restrictions None Example To display the serial port setting DGS 3120 24TC admin show serial_p...

Page 15: ...over 2 minutes the device will auto logout 5_minutes When idle over 5 minutes the device will auto logout 10_minutes When idle over 10 minutes the device will auto logout 15_minutes When idle over 15...

Page 16: ...clipaging Description This command is used to disable the pausing of the screen display when the show command output reaches the end of the page The default setting is enabled Format disable clipagin...

Page 17: ...rs None Restrictions None Example To login the Switch with a user name dlink DGS 3120 24TC admin login Command login UserName dlink PassWord DGS 3120 24TC admin 2 7 logout Description This command is...

Page 18: ...Link Corporation All rights reserved UserName 2 8 Description This command is used to display the usage description for all commands in the cuurent login account level or the specific one Format Para...

Page 19: ...to clear screen Format clear Parameters None Restrictions None Example To clear screen DGS 3120 24TC admin clear Command clear DGS 3120 24TC admin 2 10 show command_history Description The command is...

Page 20: ...nfigure the number of commands that the Switch can recall The Switch remembers upto the last 40 commands you entered Format config command_history value 1 40 Parameters value 1 40 Enter the number of...

Page 21: ...mand Example To edit the banner DGS 3120 24TC admin config greeting_message Command config greeting_message Greeting Messages Editor DGS 3120 24TC Gigabit Ethernet Switch Command Line Interface Firmwa...

Page 22: ...nd is used to modify the command prompt The current command prompt consists of four parts product name user level e g DGS 3120 24TC admin This command is used to modify the first part 1 product name w...

Page 23: ...minal width to 120 this configuration take effect on this login section If users implement save command the configuration is saved After users log out and log in again the terminal width is 120 2 If u...

Page 24: ...width Command show terminal width Global terminal width 80 Current terminal width 80 DGS 3120 24TC admin 2 17 config ports Description This command is used to configure the Switch s port settings For...

Page 25: ...the active configuration will be advertised at the next auto negotiation link_fault Local devices that disconnected due to link failure will be advertised at the next auto negotiation auto_negotiatio...

Page 26: ...mmand config ports all medium_type copper speed auto Success DGS 3120 24TC admin 2 18 show ports Description This command is used to display the current configurations of a range of ports Format show...

Page 27: ...bits Ethernet MAC Address 00 01 02 03 04 10 Bandwidth 1000000Kbit Auto Negotiation Enabled Duplex Mode Full Duplex Flow Control Disabled MDI Auto Address Learning Enabled Last Clear of Counter 0 hours...

Page 28: ...to_assign show pvid auto_assign config gvrp timer join leave leaveall value 100 100000 nni_bpdu_addr dot1d dot1ad show gvrp enable gvrp disable gvrp config private_vlan vlan_name 32 vid vlanid 2 4094...

Page 29: ...this VLAN name is conflict with the name of an existing VLAN then it will be renamed based on the following rule VLAN ID ALT collision count For example if this conflict is the second collision then t...

Page 30: ...haracters long Restrictions Only Administrator Operator and Power User level users can issue this command Example To remove a vlan v1 DGS 3120 24TC admin delete vlan v1 Command delete vlan v1 Success...

Page 31: ...d untagged or forbidden ports to the VLAN tagged Specify the additional ports as tagged untagged Specify the additional ports as untagged forbidden Specify the additional ports as forbidden delete Opt...

Page 32: ...ional Enter the list of ports used for the configuration here advertisement Optional Specify the GVRP state of this VLAN enable Specify to enable advertisement for this VLAN disable Specify to disable...

Page 33: ...specified portlist enable Specify that ingress checking will be enabled for the specified portlist disable Specify that ingress checking will be disabled for the specified portlist acceptable_frame O...

Page 34: ...tic Ports 1 1 1 24 Current Tagged Ports Current Untagged Ports 1 1 1 24 Static Tagged Ports Static Untagged Ports 1 1 1 24 Forbidden Ports Total Static VLAN Entries 1 Total GVRP VLAN Entries 0 DGS 312...

Page 35: ...on using the VLAN ID Format show vlan vlanid vidlist Parameters vidlist Enter the VLAN ID to be displayed Restrictions None Example To display the VLAN configuration for VLAN ID 1 DGS 3120 24TC admin...

Page 36: ...sabled Enabled All Frames 1 2 1 Disabled Enabled All Frames 1 3 1 Disabled Enabled All Frames 1 4 1 Disabled Enabled All Frames 1 5 1 Disabled Enabled All Frames 1 6 1 Disabled Enabled All Frames 1 7...

Page 37: ...is updated with last item of VLAN list When user removes a port from the untagged membership of the PVID s VLAN the port s PVID will be assigned with default VLAN The default setting is enabled Format...

Page 38: ...vid auto_assign Description This command is used to display the PVID auto assignment state Format show pvid auto_assign Parameters None Restrictions None Example To display PVID auto assignment state...

Page 39: ...etermine the BPDU protocol address for GVRP in service provide site It can use 802 1d GVRP address 802 1ad service provider GVRP address or a user defined multicast address dot1d Specify that the NNI...

Page 40: ...3120 24TC admin 3 17 enable gvrp Description This command is used to enable the Generic VLAN Registration Protocol GVRP Format enable gvrp Parameters None Restrictions Only Administrator Operator and...

Page 41: ...ters vlan_name 32 Specify the name of the private VLAN vid Specify the VLAN ID of the private VLAN vlanid 2 4094 Enter the VLAN ID used here This value must be between 2 and 4094 add Specify that a se...

Page 42: ...VLAN or its secondary VLAN This name can be up to 32 characters long vlanid Optional Specify the VLAN ID of the private VLAN or its secondary VLAN vidlist Enter the VLAN ID used here Restrictions None...

Page 43: ...config 802 1x init port_based ports portlist all mac_based ports portlist all mac_address macaddr config 802 1x reauth port_based ports portlist all mac_based ports portlist all mac_address macaddr c...

Page 44: ...unction DGS 3120 24TC admin enable 802 1x Command enable 802 1x Success DGS 3120 24TC admin 4 2 disable 802 1x Description This command is used to disable the 802 1X function Format disable 802 1x Par...

Page 45: ...sue this command Example To create a 802 1x user test DGS 3120 24TC admin create 802 1x user test Command create 802 1x user test Enter a case sensitive new password Enter the new password again for c...

Page 46: ...d to display the 802 1X user Format show 802 1x user Parameters None Restrictions None Example To display the 802 1X user information DGS 3120 24TC admin show 802 1x user Command show 802 1x user Curr...

Page 47: ..._pdu system Description This command is used to globally control the forwarding of EAPOL PDU When 802 1X functionality is disabled globally or for a port and if 802 1X fwd_pdu is enabled both globally...

Page 48: ...enable disable Parameters portlist Enter the list of ports used for the configuration all Specify that all the ports will be used enable Enable forwarding EAPOL PDU receive on the ports disable Disabl...

Page 49: ...signed from the RADIUS server DGS 3120 24TC admin config 802 1x authorization attributes radius disable Command config 802 1x authorization attributes radius disable Success DGS 3120 24TC admin 4 10 s...

Page 50: ...CE n Next Page p Previous Page r Refresh 4 11 config 802 1x capability Description This command is used to configure the port capability Format config 802 1x capability ports portlist all authenticato...

Page 51: ...limited It is specified by config 802 1x auth_parameter command Format config 802 1x max_users value 1 448 no_limit Parameters value 1 448 Enter the maximum number of users This value must be between...

Page 52: ...period The default value is 30 seconds and can be any integer value among 1 to 65535 sec 1 65535 Enter the tx period value here This value must be between 1 and 65535 seconds supp_timeout Optional Th...

Page 53: ...config 802 1x auth_mode Description This command is used to configure 802 1X authentication mode Format config 802 1x auth_mode port_based mac_based Parameters port_based Configure the authentication...

Page 54: ...the authentication state machine of some or all DGS 3120 24TC admin config 802 1x init port_based ports all Command config 802 1x init port_based ports all Success DGS 3120 24TC admin 4 16 config 802...

Page 55: ...LAN must be existed The specific VLAN which assigned to guest VLAN can t be deleting Format create 802 1x guest_vlan vlan_name 32 Parameters vlan_name 32 Specify the VLAN to be guest VLAN The VLAN nam...

Page 56: ...is used to configure guest VLAN setting If the specific port state is changed from enabled state to disable state this port will move to its original VLAN Format config 802 1x guest_vlan ports portli...

Page 57: ...an Description This command is used to show the information of guest VLANs Format show 802 1x guest_vlan Parameters None Restrictions None Example To show 802 1X guest VLAN on the Switch DGS 3120 24TC...

Page 58: ...Enter the IPv6 address of the RADIUS server here key The key pre negotiated between switch and the RADIUS server It is used to encrypt user s authentication data before being transmitted over interne...

Page 59: ...Administrator Operator and Power User level users can issue this command Example To add a new RADIUS server DGS 3120 24TC admin config radius add 1 10 48 74 121 key dlink default Command config radius...

Page 60: ...key string The maximum length of the plain text key is 56 bytes The encryption algorithm is based on DES auth_port Specify the UDP port number which is used to transmit RADIUS authentication data bet...

Page 61: ...isplay RADIUS server configurations Format show radius Parameters None Restrictions None Example To display RADIUS server configurations DGS 3120 24TC admin show radius Command show radius Index 1 IP...

Page 62: ...ill be displayed here Restrictions None Example To display authenticator statistics information for port 1 1 DGS 3120 24TC admin show auth_statistics ports 1 1 Command show auth_statistics ports 1 1 P...

Page 63: ...3120 24TC admin show auth_diagnostics ports 1 1 Command show auth_diagnostics ports 1 1 Port Number 1 1 EntersConnecting 11 EapLogoffsWhileConnecting 0 EntersAuthenticating 0 SuccessWhileAuthenticatin...

Page 64: ...ample To display authenticator session statistics information for port 1 1 DGS 3120 24TC admin show auth_session_statistics ports 1 1 Command show auth_session_statistics ports 1 1 Port Number 1 1 Ses...

Page 65: ...r 0 radiusAuthClientRoundTripTime 0 radiusAuthClientAccessRequests 0 radiusAuthClientAccessRetransmissions 0 radiusAuthClientAccessAccepts 0 radiusAuthClientAccessRejects 0 radiusAuthClientAccessChall...

Page 66: ...Identifier D Link radiusAuthServerEntry radiusAccServerIndex 1 radiusAccServerAddress 0 0 0 0 radiusAccClientServerPortNumber 0 radiusAccClientRoundTripTime 0 radiusAccClientRequests 0 radiusAccClient...

Page 67: ...protocol tacacs xtacacs tacacs radius delete authen server_group string 15 show authen server_group string 15 create authen server_host ipaddr protocol tacacs xtacacs tacacs radius port int 1 65535 ke...

Page 68: ...255 retransmit int 1 20 config xtacacs server_host ipaddr port int 1 65535 timeout int 1 255 retransmit int 1 20 create tacacs server_host ipaddr port int 1 65535 key key_string 254 none encryption_k...

Page 69: ...en_policy_encryption Parameters None Restrictions Only Administrator level users can issue this command Example To disable the authentication policy encryption DGS 3120 24TC admin disable authen_polic...

Page 70: ...le and can be applied to the system later When password encryption is disabled if the user specifies the password in plain text form the password will be in plan text form However if the user specifie...

Page 71: ...at enable authen_policy Parameters None Restrictions Only Administrator level users can issue this command Example To enable system access authentication policy DGS 3120 24TC admin enable authen_polic...

Page 72: ...at system access authentication policy is enabled or disabled Format show authen_policy Parameters None Restrictions Only Administrator level users can issue this command Example To display system acc...

Page 73: ...ication request will be sent to the second server host in tacacs group and so on If all server hosts in tacacs group are missing the authentication request will be sent to the first server host in tac...

Page 74: ...ion Restrictions Only Administrator level users can issue this command Example To configure a user defined method list for user login DGS 3120 24TC admin config authen_login method_list_name login_lis...

Page 75: ...login Restrictions Only Administrator level users can issue this command Example To display a user defined method list for user login DGS 3120 24TC admin show authen_login method_list_name login_list...

Page 76: ...s group are missing the authentication request will be sent to the first server host in tacacs group If all server hosts in tacacs group are missing the local enable password in the device is used to...

Page 77: ...st of authentication methods for promoting user s privilege to Admin level Format delete authen_enable method_list_name string 15 Parameters string 15 The user defined method list name This value can...

Page 78: ...d_list_name enable_list_1 Command show authen_enable method_list_name enable_list_1 Method List Name Priority Method Name Comment enable_list_1 1 local_enable Keyword DGS 3120 24TC admin 5 16 config a...

Page 79: ...Success DGS 3120 24TC admin 5 17 show authen application Description This command is used to display the login enable method list for all applications Format show authen application Parameters None R...

Page 80: ...server_group mix_1 Command create authen server_group mix_1 Success DGS 3120 24TC admin 5 19 config authen server_group Description This command is used to add or remove an authentication server host...

Page 81: ...ion protocol will be used Restrictions Only Administrator level users can issue this command Example To add an authentication server host to an server group DGS 3120 24TC admin config authen server_gr...

Page 82: ...15 characters long Restrictions Only Administrator level users can issue this command Example To display all authentication server groups DGS 3120 24TC admin show authen server_group Command show aut...

Page 83: ...cryption will apply This value is meaningless for TACACS and XTACACS key_string 254 Enter the TACACS or the RADIUS key here This key can be up to 254 characters long none No encryption for TACACS and...

Page 84: ...DIUS authentication If the value is null no encryption will apply This value is meaningless for TACACS and XTACACS key_string 254 Enter the TACACS key here This value can be up to 254 characters long...

Page 85: ...cacs Server host s authentication protocol tacacs Server host s authentication protocol radius Server host s authentication protocol Restrictions Only Administrator level users can issue this command...

Page 86: ...mat config authen parameter response_timeout int 0 255 Parameters int 0 255 The amount of time for user input on console or telnet or SSH 0 means there is no time out This value must be between 0 and...

Page 87: ...istrator level users can issue this command Example To configure the maximum attempts for user s trying to login or promote the privilege to be 9 DGS 3120 24TC admin config authen parameter attempt 9...

Page 88: ...to use either one of these 3 protocols to do enable authentication user must create a special account on the server host first which has a username enable and then configure its password as the enabl...

Page 89: ...he length for a password in plain text form and SHA 1 encrypted form are different plain text Passwords can be from a minimum of 0 to a maximum of 15 characters SHA 1 The length of Encrypted passwords...

Page 90: ...fig aaa server_group tacacs xtacacs tacacs radius group_name string 15 add delete server_host ipaddr protocol tacacs xtacacs tacacs radius Parameters tacacs Specify the built in TACACS server group xt...

Page 91: ...20 24TC admin 5 33 delete aaa server_group Description This command is used to delete a group of user defined AAA servers Format delete aaa server_group string 15 Parameters string 15 Specify the serv...

Page 92: ...aaa server_group Group Name IP Address Protocol mix_1 radius tacacs tacacs xtacacs Total Entries 5 DGS 3120 24TC admin 5 35 create accounting method_list_name Description This command is used to crea...

Page 93: ...od list of accounting methods string 15 Enter the name of the method list method Specify the protocol tacacs Specify the built in TACACS server group radius Specify the built in RADIUS server group se...

Page 94: ...led shell_acct from switch DGS 3120 24TC admin delete accounting method_list_name shell_acct Command delete accounting method_list_name shell_acct Success DGS 3120 24TC admin 5 38 show accounting Desc...

Page 95: ...rator Accounting service for all administrator level commands operator Accounting service for all operator level commands power_user Accounting service for all power user level commands user Accountin...

Page 96: ...r RADIUS key_string 254 Enter the plain text key string for RADIUS none No encryption for RADIUS encryption_key Optional The encrypted form key string for RADIUS The encryption algorithm is based on D...

Page 97: ...crypted form key string for RADIUS The encryption algorithm is based on DES key_string 344 Etner the string with maximum 344 characters timeout Optional Specify the time in second to wait for the serv...

Page 98: ...elete an AAA server host with an IP address of 10 1 1 222 that is running the TACACS protocol DGS 3120 24TC admin delete aaa server_host 10 1 1 222 protocol tacacs Command delete aaa server_host 10 1...

Page 99: ...IP address of the server host port Optional The port number of the TACACS server host int 1 65535 Enter the value between 1 and 65535 The default value is 49 timeout Optional Specify the time in secon...

Page 100: ...value between 1 and 255 The default value is 5 retransmit Optional Specify the count for re transmissions int 1 20 Enter the value between 1 and 20 The default value is 2 Restrictions Only Administra...

Page 101: ...server_host 10 1 1 224 port 15555 timeout 10 Success DGS 3120 24TC admin 5 47 config xtacacs server_host Description This command is used to configure a XTACACS server host Format config xtacacs serve...

Page 102: ...r host int 1 65535 Enter the value between 1 and 65535 The default value is 49 key Optional Specify the key for TACACS key_string 254 Enter the plain text key string for TACACS none No encryption for...

Page 103: ...encryption for RADIUS encryption_key Optional The encrypted form key string for TACACS The encryption algorithm is based on DES key_string 344 Etner the string with maximum 344 characters timeout Opti...

Page 104: ...4TC admin 5 51 disable aaa_server_password_encryption Description This command is used to disable AAA server password encryption Format disable aaa_server_password_encryption Parameters None Restricti...

Page 105: ...ting Operator Command Service Method Accounting PowerUser Command Service Method Accounting User Command Service Method Authentication Policy Encryption Enabled DGS 3120 24TC admin 5 53 config account...

Page 106: ...he create accounting method_list_name string 15 command string 15 Enter the method list name default_method_list Optional Specify accounting service by the AAA default method list disable Specify to d...

Page 107: ...Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 102 DGS 3120 24TC admin show accounting service Command show accounting service Accounting Service Network Enabled Shell Enabled System Enab...

Page 108: ...t syn fin udp src_port value 0 65535 mask hex 0x0 0xffff dst_port value 0 65535 mask hex 0x0 0xffff protocol_id value 0 255 user_define hex 0x0 0xffffffff mask hex 0x0 0xffffffff packet_content offset...

Page 109: ...ffff offset_chunk_3 value 0 31 hex 0x0 0xffffffff offset_chunk_4 value 0 31 hex 0x0 0xffffffff ipv6 class flowlabel source_ipv6_mask ipv6mask destination_ipv6_mask ipv6mask tcp src_port_mask hex 0x0 0...

Page 110: ...he IP header length is 20 bytes hex 0x0 0xffffffff Enter a user defined mask value here packet_content_mask Specify the packet content mask Only one packet_content_mask profile can be created offset_c...

Page 111: ...e_id 2 profile_name 2 ip vlan source_ip_mask 20 0 0 0 destination_ip_mask 10 0 0 0 dscp icmp type code Command create access_profile profile_id 2 profile_name t2 ip vlan source_ip_mask 20 0 0 0 destin...

Page 112: ...k destination_mac macaddr mask macmask 802 1p value 0 7 ethernet_type hex 0x0 0xffff ip vlan vlan_name 32 vlan_id vlanid 1 4094 mask hex 0x0 0x0fff source_ip ipaddr mask netmask destination_ip ipaddr...

Page 113: ...acmask Enter the source MAC mask used here destination_mac Optional Specify the destination MAC address macaddr Enter the destination MAC address used for this configuration here mask Optional Specify...

Page 114: ...range value 0 65535 Enter the UDP source port value here This value must be between 0 and 65535 mask Optional Specify an additional mask parameter that can be configured hex 0x0 0xffff Enter the sourc...

Page 115: ...port value 0 65535 Enter the UDP source port value here This value must be between 0 and 65535 mask Optional Specify an additional mask parameter that can be configured hex 0x0 0xffff Enter the UDP so...

Page 116: ...pecify the groupd ID value 1 4 Enter the value between 1 and 4 deny Specify that packets matching the access rule are filtered by the Switch time_range Optional Specify the name of the time range entr...

Page 117: ...ng Restrictions None Example To display the current access list table DGS 3120 24TC admin show access_profile Command show access_profile Access Profile Table Total User Set Rule Entries 4 Total Used...

Page 118: ...ailable HW Entries 254 Rule ID 1 Ports 1 3 Match on Class 0 Action Permit Profile ID 4 Profile name PCACL Type User Defined MASK on offset_chunk_1 0 value 0x00000000 offset_chunk_2 1 value 0x00000000...

Page 119: ...ofile profile_id 2 Access Profile Table Profile ID 2 Profile Name 2 Type Ethernet Mask on VLAN 0xF Source MAC FF FF FF 00 00 00 Destination MAC 00 00 00 FF FF FF Available HW Entries 255 Rule ID 22 Po...

Page 120: ...single rate two color mode users may set the preferred bandwidth for this rule in Kbps and once the bandwidth has been exceeded overflowing packets will either be dropped or have a drop precedence set...

Page 121: ...and 256 A lower value denotes a higher priority rate This specifies the rate for single rate two color mode Specify the committed bandwidth in Kbps for the flow The value m and n are determined by th...

Page 122: ...ACL counter option will be disabled violate Specify the action when a packet is mapped to the red color permit Permits the packet replace_dscp Optional Changes the DSCP of the packet value 0 63 Enter...

Page 123: ...This value must be between 0 and 63 drop Drops the packet counter Optional Specify the ACL counter This is optional The default is disable The resource may be limited so that a counter cannot be turne...

Page 124: ...on Profile ID 1 Aceess ID 1 Mode trTCM ColorBlind CIR Kbps 1000 CBS Kbyte 2000 PIR Kbps 2000 PBS Kbyte 2000 Action Conform Permit Counter Enabled Exceed Permit Replace DSCP 60 Counter Enabled Violate...

Page 125: ...s Use a comma to separate specific days daylist Enter the weekdays that will be included in this configuration here For example mon fri Monday to Friday sun mon fri Sunday Monday and Friday delete Del...

Page 126: ...00 00 Associated ACL Entries 2 10 3 8 DGS 3120 24TC admin 6 9 show current_config access_profile Description This command is used to display the ACL part of the current configuration when logged in w...

Page 127: ...how current_config access_profile ACL create access_profile ethernet vlan profile_id 1 config access_profile profile_id 1 add access_id 1 ethernet vlan default port 1 permit create access_profile ip s...

Page 128: ..._port value 0 65535 mask hex 0x0 0xffff protocol_id value 0 255 user_define hex 0x0 0xffffffff mask hex 0x0 0xffffffff ipv6 class value 0 255 source_ipv6 ipv6addr mask ipv6mask destination_ipv6 ipv6ad...

Page 129: ...d here This value must be between 1 and 4 A lower value denotes a higher priority profile_name The name of the profile must be specified The maximum length is 32 characters name 1 32 Enter the profile...

Page 130: ...ional Specify the IPv6 class source_ipv6_mask Optional Specify an IPv6 source sub mask ipv6mask Enter the IPv6 source sub mask value here destination_ipv6_mask Specify an IPv6 destination sub mask ipv...

Page 131: ...e ID 1 DGS 3120 24TC admin delete egress_access_profile profile_id 1 Command delete egress_access_profile profile_id 1 Success DGS 3120 24TC admin 7 3 config egress_access_profile Description This com...

Page 132: ...the VLAN name used for this configuration here This name can be up to 32 characters long vlanid Specify a VLAN ID vlanid 1 4094 Enter the VLAN ID used for this congfiguration here This value must be...

Page 133: ...mask value here flag Optional Specify the TCP flag fields all Specify that the TCP flag field will be set to all urg Specify that the TCP flag field will be set to urg ack Specify that the TCP flag f...

Page 134: ...ng parameters configured will apply to the ICMP configuration type Specify that the rule will apply to the ICMP type traffic value value 0 255 Enter the ICMP traffic type value here This value must be...

Page 135: ...e that when the packet go out switch which match the specified source IP DSCP and destination IP field it will not be dropped DGS 3120 24TC admin config egress_access_profile profile_id 2 add access_i...

Page 136: ...ame here This name can be up to 32 characters long If no parameter is specified will show the all egress access profile Restrictions None Example To display current egress access list table DGS 3120 2...

Page 137: ...ule ID 1 auto assign Ports 1 3 Match on DSCP 3 Action Permit Profile ID 3 Profile name IPv6 Type IPv6 MASK on Class Available HW Entries 126 Rule ID 1 auto assign Ports 1 4 Match on Class 10 Action Pe...

Page 138: ...F 802 1p Available HW Entries 127 Rule ID 1 auto assign Ports 1 1 Match on 802 1p 0 Action Permit DGS 3120 24TC admin 7 5 show current_config egress_access_profile Description This command is used to...

Page 139: ...auto_assign ip source_ip 10 0 0 1 destination_ip 10 90 90 90 dscp 25 port_group id 1 permit DGS 3120 24TC admin 7 6 config egress_flow_meter Description This command is used to configure the packet f...

Page 140: ...31072 Enter the comitted burst size value here pir Specify the Peak Information Rate The unit is in Kbps PIR should always be equal to or greater than CIR value 0 1048576 Enter the peak information ra...

Page 141: ...r permit Optional Permit the packet replace_dscp Changes the DSCP of the packet value 0 63 Enter the replace DSCP value here This value must be between 0 and 63 counter Optional Specify the ACL counte...

Page 142: ...how egress_flow_meter Description This command is used to display the egress flow based metering configuration Format show egress_flow_meter profile_id value 1 4 profile_name name 1 32 access_id value...

Page 143: ...BS Kbyte 100 EBS Kbyte 200 Action Conform Permit Counter Enabled Exceed Permit Replace DSCP 60 Counter Enabled Violate Drop Counter Disabled Total Entries 2 DGS 3120 24TC admin 7 8 create port_group D...

Page 144: ...pecify the port group name name 16 Enter the port group name here This name can be up to 16 characters long add Add a port list to this port group delete Delete a port list from this port group portli...

Page 145: ...dmin delete port_group id 2 Command delete port_group id 2 Success DGS 3120 24TC admin 7 11 show port_group Description This command is used to display the port group information Format show port_grou...

Page 146: ...er 3 Managed Gigabit Ethernet Switch CLI Reference Guide 141 DGS 3120 24TC admin show port_group Command show port_group Port Group Table Port Group ID Port Group Name Ports 2 group2 1 1 1 3 Total Ent...

Page 147: ...create arpentry ipaddr macaddr Parameters ipaddr The IP address of the end node or station macaddr The MAC address corresponding to the IP address above Restrictions Only Administrator Operator and P...

Page 148: ...10 48 74 121 Command delete arpentry 10 48 74 121 Success DGS 3120 24TC admin 8 3 config arpentry Description This command is used to configure a static entry s MAC address in the ARP table Specify t...

Page 149: ...being accessed before it is dropped from the table Format config arp_aging time min 0 65535 Parameters min 0 65535 Enter the ARP age out time in minutes This value must be between 0 and 65535 minutes...

Page 150: ...show arpentry ipif ipif_name 12 ipaddress ipaddr static mac_address macaddr Parameters ipif Optional The name of the IP interface the end node or station for which the ARP table entry was made resides...

Page 151: ...ime 20 Interface IP Address MAC Address Type System 10 0 0 0 FF FF FF FF FF FF Local Broadcast System 10 1 1 1 00 02 03 04 05 06 Static System 10 1 1 2 00 02 03 04 05 06 Dynamic System 10 1 1 3 00 02...

Page 152: ...rp_spoofing_prevention add gateway_ip ipaddr gateway_mac macaddr ports portlist all delete gateway_ip ipaddr Parameters add Specify to add an ARP spoofing prevention entry gateway_ip Specify a gateway...

Page 153: ..._mac 00 00 00 11 11 11 ports 1 1 1 2 Success DGS 3120 24TC admin 9 2 show arp_spoofing_prevention Description This command is used to show the ARP spoofing prevention entry Format show arp_spoofing_pr...

Page 154: ...the asymmetric VLAN function on the Switch Format enable asymmetric_vlan Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To enable a...

Page 155: ...min disable asymmetric_vlan Command disable asymmetric_vlan Success DGS 3120 24TC admin 10 3 show asymmetric_vlan Description This command is used to display the asymmetric VLAN state on the Switch Fo...

Page 156: ...TFTP server IP address from the DHCP server Then the Switch will download the configuration file from the TFTP server for configuration of the system Format enable autoconfig Parameters None Restricti...

Page 157: ...disable autoconfig Command disable autoconfig Success DGS 3120 24TC admin 11 3 show autoconfig Description This command is used to display if the auto configuration is enabled or disabled Format show...

Page 158: ...sable ipv4 state enable disable dhcpv6_client enable disable rapid_commit ip_directed_broadcast enable disable dhcp_option12 hostname hostname 63 clear_hostname state enable disable delete ipif ipif_n...

Page 159: ...admin level user dlink DGS 3120 24TC admin create account admin dlink Command create account admin dlink Enter a case sensitive new password Enter the new password again for confirmation Success DGS 3...

Page 160: ...form password the length is fixed to 35 bytes long The assword is case sensitive Restrictions Only Administrator level users can issue this command Example To configure the user password of dlink acc...

Page 161: ...Access Level admin Admin oper Operator power Power_user user User Total Entries 4 DGS 3120 24TC admin 12 4 delete account Description This command is used to delete an existing account Format delete...

Page 162: ...3120 24TC Gigabit Ethernet Switch MAC Address 00 01 02 03 04 00 IP Address 10 90 90 90 Manual VLAN Name default Subnet Mask 255 0 0 0 Default Gateway 0 0 0 0 Boot PROM Version Build 3 00 501 Firmware...

Page 163: ...s are numbered between 1 and 65535 The well known TCP port for the TELNET protocol is 23 Restrictions Only Administrator and Operator level users can issue this command Example To enable TELNET and co...

Page 164: ..._number 1 65535 Parameters tcp_port_number 1 65535 Optional The TCP port number TCP ports are numbered between 1 and 65535 The well known TCP port for the WEB protocol is 80 Restrictions Only Administ...

Page 165: ...20 24TC admin 12 10 reboot Description This command is used to restart the Switch Format reboot force_agree Parameters force_agree Optional When force_agree is specified the reboot command will be exe...

Page 166: ...will not do save neither reboot system Optional If you specify the system keyword all parameters are reset to default settings Then the Switch will do factory reset save and reboot force_agree Option...

Page 167: ...24TC admin 12 13 create ipif RI and EI Mode Only Description This command is used to create an IP interface Format create ipif ipif_name 12 network_address vlan_name 32 secondary state enable disable...

Page 168: ...nd create ipif Inter2 192 168 16 1 24 default state enable secondary Success DGS 3120 24TC admin 12 14 config ipif Description This command is used to configure the IP interface Format config ipif ipi...

Page 169: ...v6 interface sate will be disabled ipv4 Specify that the IPv4 configuration will be done state Specify that the IPv4 interface state will be set to enabled or disabled enable Specify that the IPv4 int...

Page 170: ...of the IP interface ipif_name 12 Enter the IP interface name used here This name can be up to 12 characters long ipv6address Optional Specify the IPv6 network address The address should specify a host...

Page 171: ...an issue this command Example To enable an IP interface DGS 3120 24TC admin enable ipif newone Command enable ipif newone Success DGS 3120 24TC admin 12 17 disable ipif Description This command is use...

Page 172: ...he IP interface name used here This name can be up to 12 characters long Restrictions None Example To display an IP interface DGS 3120 24TC admin show ipif Command show ipif IP Interface System VLAN N...

Page 173: ...Format enable ipif_ipv6_link_local_auto ipif_name 12 all Parameters ipif_name 12 Enter the IP interface name used here This name can be up to 12 characters long all Specify that all the IP interfaces...

Page 174: ...ame 12 Parameters ipif_name 12 Optional Enter the Ip interface name used here This name can be up to 12 characters long Restrictions Only Administrator Operator and Power User level users can issue th...

Page 175: ...fault route has higher route preference than it Format config ipif ipv6_autoconfig ipif_name 12 state enable disable default Parameters ipif_name 12 Enter the IP interface s name that will be configur...

Page 176: ...ation Thus BPDU protection can only be enabled on STP disabled port BPDU protection has high priority than fbpdu setting configured by configure STP command in determination of BPDU handling That is w...

Page 177: ...sable and re enable the port Format config bpdu_protection recovery_timer sec 60 1000000 infinite Parameters recovery_timer Specified the bpdu_protection Auto Recovery recovery_timer The default value...

Page 178: ...of attack_detected and attack_cleared shall be trapped or logged Restrictions Only Administrator Operator and Power User level users can issue this command Example To config the bpdu_protection trap s...

Page 179: ...Restrictions Only Administrator Operator and Power User level users can issue this command Example To disable bpdu_protection function globally for the entire switch DGS 3120 24TC admin disable bpdu_p...

Page 180: ...tection Log Status Both DGS 3120 24TC admin To show the bpdu_protection status ports 1 12 DGS 3120 24TC admin show bpdu_protection ports 1 1 1 12 Command show bpdu_protection ports 1 1 1 12 Port State...

Page 181: ...e test will obtain the distance of the cable Since the status is link up the cable will not have the short or open problem But the test may still detect the crosstalk problem When a port is in link do...

Page 182: ...link partner is powered down with no errors and the link is down this command cannot detect the cable length When the link partner is powered down with errors this command can detect whether the error...

Page 183: ...8 DGS 3120 24TC admin cable_diag ports 1 1 1 11 1 12 Command cable_diag ports 1 1 1 11 1 12 Perform Cable Diagnostics Port Type Link Status Test Result Cable Length M 1 1 1000BASE T Link Up OK 1 1 11...

Page 184: ...ownloading the configuration all configuration commands should not be logged When the user under AAA authentication the user name should not changed if user uses enable admin command to replace its pr...

Page 185: ...mand disable command logging Success DGS 3120 24TC admin 15 3 show command logging Description This command is used to display the Switch s general command logging configuration status Format show com...

Page 186: ...xStack DGS 3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 181...

Page 187: ...RI and EI Mode Only show authentication ports portlist enable authorization attributes disable authorization attributes show authorization config authentication server failover local permit block show...

Page 188: ...Specify the guest VLAN by VLAN name vlan_name 32 Enter the VLAN name here This name can be up to 32 characters long vlanid Specify the guest VLAN by VLAN ID vlanid 1 4094 Enter the VLAN ID here This I...

Page 189: ...rts all Success DGS 3120 24TC admin 16 4 config authentication ports Description This command is used to configure security port s Format config authentication ports portlist all auth_mode port_based...

Page 190: ...rst and then IMPB will be verified Both authentications need to be passed impb_wac WAC will be verified first and then IMPB will be verified Both authentications need to be passed mac_impb MAC will be...

Page 191: ...s 1 Use one delimiter e g aabbcc ddeeff 2 Use two delimiters e g aabb ccdd eeff 5 Use five delimiters e g aa bb cc dd ee ff Restrictions Only Administrator Operator and Power User level users can issu...

Page 192: ...1 1 24 Total Entries 1 DGS 3120 24TC admin 16 7 show authentication ports Description This command is used to display authentication setting on port s Format show authentication ports portlist Parame...

Page 193: ...1 10 None Host based 1 11 None Host based 1 12 None Host based 1 13 None Host based 1 14 None Host based 1 15 None Host based 1 16 None Host based 1 17 None Host based 1 18 None Host based 1 19 None...

Page 194: ...sable authorization Format disable authorization attributes Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example This example sets authori...

Page 195: ...Format config authentication server failover local permit block Parameters local Use local DB to authenticate the client permit The client is always regarded as authenticated block Block the client De...

Page 196: ...onfiguration DGS 3120 24TC admin show authentication Command show authentication Authentication Server Failover Block DGS 3120 24TC admin 16 13 show authentication mac_format Description This command...

Page 197: ...ayer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 192 DGS 3120 24TC admin show authentication mac_format Command show authentication mac_format Case Uppercase Delimiter Hyphen Delimiter Numbe...

Page 198: ...ollowed by up to three filter strings ex stp A filter string is enclosed by symbol The following describes the meaning of the each filter type include includes lines that contain the specified filter...

Page 199: ...e up to 80 characters long include Optional Include lines that contain the specified filter string exclude Optional Exclude lines that contain the specified filter string begin Optional The first line...

Page 200: ...disabled disable sim disable stp disable ssh Output truncated DGS 3120 24TC admin 17 2 config configuration Description This command is used to select a configuration file as the next boot up configur...

Page 201: ...be specified If the configuration ID or configuration file name is not specified the next boot up configuration is implied Format save config pathname log all Parameters config Optional Specify to sav...

Page 202: ...tch CLI Reference Guide 197 Format show boot_file Parameters None Restrictions None Example To display the boot file DGS 3120 24TC admin show boot_file Command show boot_file Bootup Firmware c runtime...

Page 203: ...ing the trap by the SNMP agent when the configuration is saved in NVRAM enable Send the trap by the SNMP agent when the configuration is saved in NVRAM disable No trap will be send upload Optional Ena...

Page 204: ...xStack DGS 3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 199...

Page 205: ...int 1 4294967295 ma string 22 ma_index uint 1 4294967295 delete cfm ma string 22 ma_index uint 1 4294967295 md string 22 md_index uint 1 4294967295 delete cfm md string 22 md_index uint 1 4294967295 e...

Page 206: ...must be between 1 and 4294967295 level Specify the maintenance domain level int 0 7 Enter the maintenance domain level here This value must be between 0 and 7 Restrictions Only Administrator Operator...

Page 207: ...e sender ID TLV none Do not transmit the sender ID TLV This is the default value chassis Transmit the sender ID TLV with the chassis ID information manage Transmit the sender ID TLV with the managed a...

Page 208: ...fied for an MA can be located in different devices MEPs must be created on the ports of these devices explicitly An MEP will transmit a CCM packet periodically across the MA The receiving MEP will ver...

Page 209: ...intenance domain that this MA is associated with This is the default value ccm_interval Optional This is the CCM interval 100ms Specify that the CCM interval will be set to 100 milliseconds Not recomm...

Page 210: ...ion name string 22 Enter the maintenance association name used here This name can be up to 22 characters long ma_index Specify the maintenance association index uint 1 4294967295 Enter the maintenance...

Page 211: ...ters long ma_index Specify the maintenance association index uint 1 4294967295 Enter the maintenance association index value here This value must be between 1 and 4294967295 state Optional This is the...

Page 212: ...This command is used to delete a previously created MEP Format delete cfm mep mepname string 32 mepid int 1 8191 md string 22 md_index uint 1 4294967295 ma string 22 ma_index uint 1 4294967295 Parame...

Page 213: ...uint 1 4294967295 md string 22 md_index uint 1 4294967295 Parameters string 22 Enter the maintenance association name This name can be up to 22 characters long ma_index Specify the maintenance associ...

Page 214: ...delete cfm md string 22 md_index uint 1 4294967295 Parameters string 22 Enter the maintenance domain name This name can be up to 22 characters long md_index Specify the maintenance domain index uint...

Page 215: ...e CFM globally DGS 3120 24TC admin enable cfm Command enable cfm Success DGS 3120 24TC admin 19 11 disable cfm Description This command is used to disable the CFM globally Format disable cfm Parameter...

Page 216: ...unction is disabled on that port Format config cfm ports portlist state enable disable Parameters portlist Enter the list of ports used for this configuration here state Specify that the the CFM funct...

Page 217: ...ce domain name used here This name can be up to 22 characters long md_index Optional Specify the maintenance domain index uint 1 4294967295 Enter the maintenance domain index value here This value mus...

Page 218: ...ow cfm md op_domain Command show cfm md op_domain MD Index 1 MD Name op_domain MD Level 2 MIP Creation Explicit SenderID TLV None MA Index MA Name VID 1 op1 1 DGS 3120 24TC admin show cfm md op_domain...

Page 219: ...Sequence CCMs 0 received Cross connect CCMs 0 received Error CCMs 0 received Normal CCMs 0 received Port Status CCMs 0 received If Status CCMs 0 received CCMs transmitted 71 In order LBRs 0 received...

Page 220: ...ex Optional Specify the maintenance association index uint 1 4294967295 Enter the maintenance association index value here This value must be between 1 and 4294967295 Restrictions None Example To show...

Page 221: ...loopback test The MAC address represents the destination MEP or MIP that can be reached by this MAC address The MEP represents the source MEP to initiate the loopback message Format cfm loopback macad...

Page 222: ...500 characters long pdu_priority Optional The 802 1p priority to be set in the transmitted LBMs If not specified it uses the same priority as CCMs and LTMs sent by the MA int 0 7 Enter the PDU priorit...

Page 223: ...int 2 255 Enter the link trace message TTL value This value must be between 2 and 255 pdu_priority Optional The 802 1p priority to be set in the transmitted LTM If not specified it uses the same prio...

Page 224: ...x uint 1 4294967295 Enter the maintenance association index value This value must between 1 and 4294967295 trans_id Optional Specify the identifier of the transaction displayed uint Enter the transact...

Page 225: ...967295 mepid int 1 8191 mepname string 32 Parameters md Optional Specify the maintenance domain name string 22 Enter the maintenance domain name This name can be up to 22 characters long md_index Spec...

Page 226: ...ase entries All entries in the MIP CCM database will be shown A MIP CCM entry is similar to a FDB which keeps the forwarding port information of a MAC entry Format show cfm mipccm Parameters None Rest...

Page 227: ...this command Example To enable the all MPs reply LTRs function DGS 3120 24TC admin config cfm mp_ltr_all enable Command config cfm mp_ltr_all enable Success DGS 3120 24TC admin 19 23 show cfm mp_ltr_a...

Page 228: ...p to 22 characters long md_index Specify the maintenance domain index uint 1 4294967295 Enter the maintenance domain index value This value must between 1 and 4294967295 ma Specify the maintenance ass...

Page 229: ...nters Format show cfm pkt_cnt ports portlist rx tx rx tx ccm Parameters ports Optional Specify the port counters to show If not specified all ports will be shown portlist Enter the list of ports used...

Page 230: ...4 3 578 578 0 0 0 0 4 578 578 0 0 0 0 5 578 578 0 0 0 0 6 578 578 0 0 0 0 7 578 578 0 0 0 0 8 578 578 0 0 0 0 9 578 578 0 0 0 0 10 578 578 0 0 0 0 11 578 578 0 0 0 0 12 578 578 0 0 0 0 DGS 3120 24TC a...

Page 231: ...CM RX counters Restrictions Only Administrator Operator and Power User level users can issue this command Example To clear the CFM packet s RX TX counters DGS 3120 24TC admin clear cfm pkt_cnt Command...

Page 232: ...le the CFM trap state This is the default disable Disable the CFM trap state Restrictions Only Administrator Operator and Power User level users can issue this command Example DGS 3120 24TC admin conf...

Page 233: ...st NOTE This default client MD level is not a fixed value It may change when creating or deleting higher level MD and MA on the device When the most immediate client layer MIPs and MEPs do not exist t...

Page 234: ...d Operator level users can issue this command Example To configure the AIS function enabled and client level is 5 DGS 3120 24TC admin config cfm ais md op domain ma op ma mepid 1 state enable level 5...

Page 235: ...LCK PDU The default client MD level is MD level at which the most immediate client layer MIPs and MEPs exist int 0 7 Enter the client level ID here This value must be between 0 and 7 state Optional Sp...

Page 236: ...hich sends LCK frame int 1 8191 Enter the MEP ID value here This value must be between 1 and 8191 remote_mepid The peer MEP is the target of management action int 1 8191 Enter the remote MEP ID used h...

Page 237: ...094 source_ip ipaddr destination_ip ipaddr dscp value 0 63 icmp type value 0 255 code value 0 255 igmp type value 0 255 tcp src_port value 0 65535 dst_port value 0 65535 flag all urg ack psh rst syn f...

Page 238: ...code traffic igmp Specify that the rule applies to IGMP traffic type Optional Specify that the rule applies to IGMP type traffic tcp Specify that the rule applies to TCP traffic src_port_mask Optiona...

Page 239: ...cify the IPv6 class flowlabel Optional Specify the IPv6 flowlabel source_ipv6_mask Optional Specify an IPv6 source submask ipv6mask Enter the IPv6 source submask here destination_ipv6_mask Optional Sp...

Page 240: ...20 0 0 0 destination_ip_mask 10 0 0 0 dscp icmp type code Success DGS 3120 24TC admin 21 2 delete cpu access_profile Description This command is used to delete CPU access list rules Format delete cpu...

Page 241: ...e ID value here This value must be between 1 and 5 access_id Specify the index of access list entry The range of this value is 1 100 value 1 100 Enter the access ID here This value must be between 1 a...

Page 242: ...y that the TCP flag field mask will be set to urg ack Specify that the TCP flag field mask will be set to ack psh Specify that the TCP flag field mask will be set to psh rst Specify that the TCP flag...

Page 243: ...meter that can be configured hex 0x0 0xffff Enter the TCP source port mask value here dst_port Optional Specify the value of the IPv6 Layer 4 TCP destination port value 0 65535 Enter the TCP destinati...

Page 244: ...1 ip vlan default source_ip 20 2 2 3 destination_ip 10 1 1 252 dscp 3 icmp type 11 code 32 port 1 deny Command config cpu access_profile profile_id 1 add access_id 1 ip vlan default source_ip 20 2 2 3...

Page 245: ...nd Example To disable cpu_interface_filtering DGS 3120 24TC admin disable cpu_interface_filtering Command disable cpu_interface_filtering Success DGS 3120 24TC admin 21 6 show cpu access_profile Descr...

Page 246: ...abled CPU Interface Access Profile Table Total Unused Rule Entries 497 Total Used Rule Entries 3 Profile ID 1 Type IPv6 MASK on Source IPv6 Addr FFFF FFFF FFFF Unused Rule Entries 99 Rule ID 1 Ports 2...

Page 247: ...Match on Source MAC 00 00 22 B0 61 51 Action Deny Profile ID 4 Type User Defined MASK on Offset 0 15 0xFFF000FF 0xFFFFFFFF 0xFFFFFFFF 0xFFFFFFFF Offset 16 31 0xFFFFFFFF 0xFFFFFFFF 0xFF00FFFF 0xFFFFFFF...

Page 248: ...debug ripng state enable RI Mode Only debug ripng state disable RI Mode Only debug ripng show flag RI Mode Only debug ripng flag interface packet all rx tx route all state enable disable RI Mode Only...

Page 249: ...ion This command is used to dump clear or upload the software error log to a TFTP server Format debug error_log dump clear upload_toTFTP ipaddr path_filename 64 Parameters dump Display the debug messa...

Page 250: ...C 801D703C 8013B8A4 802AE754 802A5E0C To clear the error log DGS 3120 24TC admin debug error_log clear Command debug error_log clear Success DGS 3120 24TC admin To upload the error log to TFTP server...

Page 251: ...he debug buffer Then the functions which will be used in the system s memory pool resources may fail to excute these commands successfully Use the debug buffer clear command to release the system s me...

Page 252: ...er upload_toTFTP 10 0 0 90 debugcontent txt Connecting to server Done Upload debug file Done DGS 3120 24TC admin 22 4 debug output Description This command is used to set a specified module s debug me...

Page 253: ...C admin 22 5 debug config error_reboot Description This command is used to set if the Switch needs to be rebooted when a fatal error occurs When the error occurs the watchdog timer will be disabled by...

Page 254: ...ate enable disable Parameters enable Enable the debug state disable Disable the debug state Restrictions Only Administrator level users can issue this command Example To set the debug state to disable...

Page 255: ...ocol all IPv6 ICMP TCP UDP OSPFV3 all STACK by_priority Parameters portlist Specify a range of ports all Specify all ports by_cos Display by Cos by_reason Display by reason by_protocol Display by prot...

Page 256: ...rx 0 tx 0 3 rx 0 tx 0 4 rx 0 tx 0 5 rx 0 tx 0 6 rx 0 tx 0 7 rx 0 tx 0 unknown rx 0 tx 0 total rx 0 tx 0 Ports 2 CoS 0 rx 0 tx 0 1 rx 0 tx 0 2 rx 0 tx 0 3 rx 0 tx 0 4 rx 0 tx 0 5 rx 0 tx 0 6 rx 0 tx 0...

Page 257: ...FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF F...

Page 258: ...cription This command is used to enable the DHCPv6 client debug function Format debug dhcpv6_client state enable Parameters None Restrictions Only Administrator level users can issue this command Exam...

Page 259: ...20 24TC admin 22 13 debug dhcpv6_client output Description This command is used to set debug message to output to buffer or console Format debug dhcpv6_client output buffer console Parameters buffer L...

Page 260: ...acket sending debug flag state Specify the state of the designated flags enable Enable the designated flags disable Disable the designated flags Restrictions Only Administrator level users can issue t...

Page 261: ...and is used to disable DHCPv6 relay debug functions Format debug dhcpv6_relay state disable Parameters None Restrictions Only Administrator level users can issue this command Example To disable DHCPv6...

Page 262: ...or disable the debug information flag of the DHCPv6 relay packet including packets receiving and sending Format debug dhcpv6_relay packet all receiving sending state enable disable Parameters all Set...

Page 263: ...debug dhcpv6_relay hop_count state enable Command debug dhcpv6_relay hop_count state enable Success DGS 3120 24TC admin 22 20 debug address_binding RI and EI Mode Only Description This command is used...

Page 264: ...24TC admin 22 21 debug ripng state enable RI Mode Only Description This command is used to enable the RIPng debug flag Format debug ripng state enable Parameters None Restrictions Only Administrator l...

Page 265: ...nd debug ripng state disable Success DGS 3120 24TC admin 22 23 debug ripng show flag RI Mode Only Description This command is used to display the RIPng debug flag setting Format debug ripng show flag...

Page 266: ...d packets with debug flag route Optional The state of the RIPng route debug The default setting is disabled all Specify to configure all debug flags state Specify the designated flag status enable Ena...

Page 267: ...ss DGS 3120 24TC admin 22 26 debug show address_binding binding_state_table RI and EI Mode Only Description This command is used to display the ND snooping and DHCPv6 binding state table Format debug...

Page 268: ...the OSPF interface state change debug dr_bdr_selection Optional Specify to include or exclude debug information for DR BDR selection lsa Specify the state of the designated debug flag all Specify to...

Page 269: ...e_change state enable Command debug ospf neighbor_state_change state enable Success DGS 3120 24TC admin To enable OSPF interface state change debug DGS 3120 24TC admin debug ospf interface_state_chang...

Page 270: ...OSPF statistic counters Format debug ospf clear counter packet neighbor spf Parameters packet Optional Specify to reset the OSPF packet counter neighbor Optional Specify to reset the OSPF neighbor eve...

Page 271: ...nable Command debug ospf log state enable Success DGS 3120 24TC admin 22 30 debug ospf show counter RI Mode Only Description This command is used to display OSPF statistic counters Format debug ospf s...

Page 272: ...0 Drop 0 Auth Fail 0 Packet Sending Total 59 Hello 59 DD 0 LSR 0 LSU 0 LSAck 0 Neighbor State Change 0 SeqMismatch 0 SPF Calculation Intra 0 Inter 0 Extern 0 DGS 3120 24TC admin 22 31 debug ospf show...

Page 273: ...tingCapability 0 MC NOT Multicast Capable 0 N P NSSA Bit 0 EA Not Support Rcv And Fwd EA_LSA 0 DC Not Support Handling Of Demand Circuits 0 O O Bit Isn t Set 0 7 Bit Isn t Set LS Sequence Number 0x800...

Page 274: ...econds Options 0x2 0 0 Bit Isn t Set 1 E ExternalRoutingCapability 0 MC NOT Multicast Capable 0 N P NSSA Bit 0 EA Not Support Rcv And Fwd EA_LSA 0 DC Not Support Handling Of Demand Circuits 0 O O Bit...

Page 275: ...NOT Multicast Capable 0 N P NSSA Bit 0 EA Not Support Rcv And Fwd EA_LSA 0 DC Not Support Handling Of Demand Circuits 0 O O Bit Isn t Set 0 7 Bit Isn t Set LS Sequence Number 0x80000002 Length 36 Fla...

Page 276: ...ising Router 10 90 90 91 LS Age 10 Seconds Options 0x2 0 0 Bit Isn t Set 1 E ExternalRoutingCapability 0 MC NOT Multicast Capable 0 N P NSSA Bit 0 EA Not Support Rcv And Fwd EA_LSA 0 DC Not Support Ha...

Page 277: ...ternal Link AREA 0 0 0 1 NSSA External LSA Link State ID 0 0 0 0 Advertising Router 10 90 90 91 LS Age 855 Seconds Options 0x2 0 0 Bit Isn t Set 1 E ExternalRoutingCapability 0 MC NOT Multicast Capabl...

Page 278: ...is command Example To display the current OSPF debug flag s settings DGS 3120 24TC admin debug ospf show flag Command debug ospf show flag Global State Disabled Current OSPF Flags Setting Neighbor Sta...

Page 279: ...tate DGS 3120 24TC admin debug ospf show log state Command debug ospf show log state OSPF Log State Enabled DGS 3120 24TC admin 22 38 debug ospf show redistribution RI Mode Only Description This comma...

Page 280: ...g 1 1 1 0 24 0 0 0 0 ON 2 0 0 0 0 OSPF ASE Table IP Nexthop State Type Tag 1 1 1 0 24 0 0 0 0 ON 2 0 0 0 0 DGS 3120 24TC admin 22 39 debug ospf show request_list RI Mode Only Description This command...

Page 281: ...0 RTID 90 2 0 1 LSID 192 194 135 0 RTID 90 2 0 1 LSID 192 194 136 0 RTID 90 2 0 1 LSID 192 194 137 0 RTID 90 2 0 1 LSID 192 194 138 0 RTID 90 2 0 1 DGS 3120 24TC admin 22 40 debug ospf show summary_li...

Page 282: ...Only Description This command is used to set the OSPF debug global state Format debug ospf state enable disable Parameters enable Specify that the OSPF debug global state will be enabled disable Spec...

Page 283: ...ers debug flag state Specify the state of the configured VRRP debug flag enable Specify that the configured VRRP debug flag will be enabled disable Specify that the configured VRRP debug flag will be...

Page 284: ...ommand debug vrrp timers state enable Success DGS 3120 24TC admin 22 43 debug vrrp clear counter RI Mode Only Description This command is used to reset the VRRP debug statistic counters Format debug v...

Page 285: ...Administrator level users can issue this command Example To enable the VRRP debug log state DGS 3120 24TC admin debug vrrp log state enable Command debug vrrp log state enable Success DGS 3120 24TC a...

Page 286: ...RI Mode Only Description This command is used to display VRRP debug flag settings Format debug vrrp show flag Parameters None Restrictions Only Administrator level users can issue this command Exampl...

Page 287: ...the VRRP debug log state DGS 3120 24TC admin debug vrrp show log state Command debug vrrp show log state VRRP Debug Log State Enabled DGS 3120 24TC admin 22 48 debug vrrp state RI Mode Only Descriptio...

Page 288: ...strictions Only Administrator level users can issue this command Example To enable the PIM SSM debug function DGS 3120 24TC admin debug pim ssm Command debug pim ssm Success DGS 3120 24TC admin Once t...

Page 289: ...0 24TC admin no debug pim ssm Command no debug pim ssm Success DGS 3120 24TC admin 22 51 debug show cpu utilization Description This command is used to display the total CPU utilization and CPU utiliz...

Page 290: ...CLI Reference Guide 285 DGS 3120 24TC admin debug show cpu utilization Command debug show cpu utilization Five seconds 13 One minute 12 Five minutes 12 Process Name 5Sec 1Min 5Min OS_UTIL 88 88 88 bc...

Page 291: ...tcp_tiny_frag_attack 1 all action drop state enable disable 1 Parameters land_attack Specify the type of DoS attack as land attack blat_attack Specify the type of DoS attack as blat attack tcp_null_s...

Page 292: ...ping_death_attack tcp_tiny_frag_attack Parameters land_attack Optional Specify the type of DoS attack as land attack blat_attack Optional Specify the type of DoS attack as blat attack tcp_null_scan O...

Page 293: ...Port Less 1024 Disabled Drop Ping of Death Attack Disabled Drop TCP Tiny Fragment Attack Disabled Drop CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh 23 3 config dos_prevention trap Des...

Page 294: ...used to enable or disable the DoS prevention log state Format config dos_prevention log enable disable Parameters enable Specify to enable DoS prevention log state disable Specify to disable DoS preve...

Page 295: ...change of the source MAC address and gateway address DHCP option 82 will be automatically added Format config dhcp_local_relay vlan vlan_name 32 state enable disable Parameters vlan_name 32 Specify t...

Page 296: ...relay for specified VLAN enable Specify that the DHCP local relay function will be enabled disable Specify that the DHCP local relay function will be disabled Restrictions Only Administrator level us...

Page 297: ...used to globally disable the DHCP local relay function on the Switch Format disable dhcp_local_relay Parameters None Restrictions Only Administrator level users can issue this command Example To disab...

Page 298: ...itch CLI Reference Guide 293 Restrictions None Example To display local dhcp relay status DGS 3120 24TC admin show dhcp_local_relay Command show dhcp_local_relay DHCP BOOTP Local Relay Status Disabled...

Page 299: ...paddr drop config dhcp_relay option_61 delete mac_address macaddr string desc_long 255 all show dhcp_relay option_61 config dhcp_relay option_82 check enable disable config dhcp_relay option_82 circui...

Page 300: ...ss DGS 3120 24TC admin 25 2 config dhcp_relay add Description This command is used to add an IP destination address to the Switch s DHCP relay table Used to configure a DHCP server for relay of packet...

Page 301: ..._list Enter the VLAN ID list used for this configuration here ipaddr Enter the DHCP BOOTP server IP address used here Restrictions Only Administrator Operator and Power User level users can issue this...

Page 302: ...hen the configuration at the interface level has higher priority In this case the DHCP server configured on the VLAN will not be used to forward the DHCP packets Format config dhcp_relay delete vlanid...

Page 303: ...d Example To enable the DHCP relay function DGS 3120 24TC admin enable dhcp_relay Command enable dhcp_relay Success DGS 3120 24TC admin 25 7 disable dhcp_relay Description This command is used to disa...

Page 304: ...ption This command is used to display the current DHCP relay configuration Format show dhcp_relay ipif ipif_name 12 Parameters ipif Optional Specify the IP interface name ipif_name 12 Enter the IP int...

Page 305: ...ption_60 Description This command is used to decide whether DHCP relay will process the DHCP option 60 or not When option_60 is enabled if the packet does not have option 60 then the relay servers can...

Page 306: ...dd string multiword 255 relay ipaddr exact match partial match Parameters string Specify the string used multiword 255 Enter the string value here This value can be up to 255 characters long relay Spe...

Page 307: ...will be the union of option 60 default relay servers and the relay servers determined by option 61 Format config dhcp_relay option_60 default relay ipaddr mode drop relay Parameters relay Specify the...

Page 308: ...is specified by the user ipaddr Optional Enter the IP address used for this configuration here Restrictions Only Administrator Operator and Power User level users can issue this command Example To del...

Page 309: ...packet does not have option 61 then the relay servers cannot be determined based on option 61 If the relay servers are determined based on option 60 or option 61 then per IPIF configured servers will...

Page 310: ...n of these two sets of the servers Format config dhcp_relay option_61 add mac_address macaddr string desc_long 255 relay ipaddr drop Parameters mac_address The client s client ID which is the hardware...

Page 311: ...and Power User level users can issue this command Example To configure the DHCP relay option 61 function DGS 3120 24TC admin config dhcp_relay option_61 default drop Command config dhcp_relay option_6...

Page 312: ...on 61 entry DGS 3120 24TC admin config dhcp_relay option_61 delete mac_address 00 11 22 33 44 55 Command config dhcp_relay option_61 delete mac_address 00 11 22 33 44 55 Success DGS 3120 24TC admin 25...

Page 313: ...mat config dhcp_relay option_82 check enable disable Parameters enable When the state is enabled the DHCP packet will be inserted with the option 82 field before being relayed to server The DHCP packe...

Page 314: ...llowed in the string vendor1 If configured to vendor1 the circuit ID uses the following format to communicate with Alcatel Lucent s server a b c d e f g h i j 1 0x10 0 6 VLAN Slot ID Port ID 1 6 MAC 1...

Page 315: ...o vendor5 the circuit ID uses the following format a b c d e f g h 1 n System name Space 0x20 e 0x65 t 0x74 h 0x68 Space 0x20 1 byte 1 byte 0 128 bytes 1 byte 1 byte 1 byte 1 byte 1 byte i j k l m n o...

Page 316: ...Character n F09 Character e F10 Character t F11 Chassis ID The number of the chassis For stand alone devices the chassis ID will always be 1 For stacked devices the chassis ID will be the unit ID F12...

Page 317: ...as the option 82 field If the packet from the client side contains an Option 82 value the packet will be dropped If the packet from the client side doesn t contain an Option 82 value it inserts it s o...

Page 318: ...configured to vendor3 the remote ID uses the following format a b c 2 n User defined 1 byte 1 byte Maximum 32 bytes a Sub option type 2 means remote ID b Length Total length of user defined string By...

Page 319: ...el users can issue this command Example To enable DHCP relay option 82 state DGS 3120 24TC admin config dhcp_relay option_82 state enable Command config dhcp_relay option_82 state enable Success DGS 3...

Page 320: ...destination IP address inner VLAN ID Format show dhcp_relay server_cvid ipaddr Parameters ipaddr Enter the DHCP or BOOTP server IP address Restrictions None Example To display the DHCP server with the...

Page 321: ...Administrators Operators and Power Users can issue this command Example To configure the vendor 3 circuit ID of port 1 to 12345678 DGS 3120 24TC admin config dhcp_relay port_option_82 1 1 circuit_id v...

Page 322: ...admin show dhcp_relay port_option_82 1 1 1 4 Command show dhcp_relay port_option_82 1 1 1 4 DHCP Relay Agent Information Option 82 Per port info Port Type Option 82 Remote ID Value Option 82 Circuit I...

Page 323: ...ts number 0 10 config dhcp ping_timeout millisecond 10 2000 create dhcp pool manual_binding pool_name 12 ipaddr hardware_address macaddr type ethernet ieee802 delete dhcp pool manual_binding pool_name...

Page 324: ...mand is used to delete a DHCP server exclude address Format delete dhcp excluded_address begin_address ipaddr end_address ipaddr all Parameters begin_address Specify the starting address of the IP add...

Page 325: ...e To display the DHCP server excluded addresses GS 3120 24TC admin show dhcp excluded_address Command show dhcp excluded_address Index Begin Address End Address 1 10 10 10 1 10 10 10 10 Total Entries...

Page 326: ...all Specify to delete all the DHCP pools Restrictions Only Administrator Operator and Power User level users can issue this command Example To delete a DHCP pool DGS 3120 24TC admin delete dhcp pool d...

Page 327: ...strictions Only Administrator Operator and Power User level users can issue this command Example To configure the address range of the DHCP address pool DGS 3120 24TC admin config dhcp pool network_ad...

Page 328: ...ce for the same pool the second command will overwrite the first command Format config dhcp pool dns_server pool_name 12 ipaddr ipaddr ipaddr Parameters pool_name 12 Specify the DHCP pooll name ipaddr...

Page 329: ...INS server IP address DGS 3120 24TC admin config dhcp pool netbios_name_server dhcppool01 10 10 10 1 Command config dhcp pool netbios_name_server dhcppool01 10 10 10 1 Success DGS 3120 24TC admin 26 1...

Page 330: ...e default router should be on the same subnet as the client If the default router is not specified the default router information will not be provided to the client If this command is input twice for...

Page 331: ...e Specify a lease of unlimited duration Restrictions Only Administrator Operator and Power User level users can issue this command Example To configure the lease of a pool DGS 3120 24TC admin config d...

Page 332: ...tion This command is used by the DHCP client boot process typically a TFTP server If next server information is not specified it will not be provided to the client If this command is input twice for t...

Page 333: ...address Format config dhcp ping_packets number 0 10 Parameters number 0 10 Specify the number of ping packets 0 means there is no ping test The default value is 2 Restrictions Only Administrator Opera...

Page 334: ...he manual binding entry must be in a range within that the network uses for the DHCP pool If the user specifies a conflict IP address an error message will be returned If a number of manual binding en...

Page 335: ...fy the DHCP pool name ipaddr Specify the IP address which will be assigned to a specified client all Specify to delete all IP addresses Restrictions Only Administrator Operator and Power User level us...

Page 336: ...inding dhcppool01 10 20 3 4 Success DGS 3120 24TC admin 26 20 show dhcp binding Description This command is used to display dynamic binding entries Format show dhcp binding pool_name 12 Parameters poo...

Page 337: ...pool name Restrictions None Example To display the current DHCP pool information for engineering DGS 3120 24TC admin show dhcp pool engineering Command show dhcp pool engineering Pool Name engineering...

Page 338: ...02 02 02 ethernet Total Entries 1 DGS 3120 24TC admin 26 23 enable dhcp_server Description This command is used to enable the DHCP server function If DHCP relay is enabled DHCP server cannot be enable...

Page 339: ...to disable the DHCP server function on the switch Format disable dhcp_server Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To disa...

Page 340: ...24TC admin 26 26 clear dhcp conflict_ip Description This command is used to clear an entry or all entries from the conflict IP database Format clear dhcp conflict_ip ipaddr all Parameters ipaddr Spec...

Page 341: ...conflict will be moved to the conflict IP database The system will not attempt to bind the IP address in the conflict IP database unless the user clears it from the conflict IP database Format show d...

Page 342: ...erver screening With DHCP server screening function illegal DHCP server packet will be filtered This command is used to configure the state of the function for filtering of DHCP server packet and to a...

Page 343: ...state Specify to enable or disable the filter DHCP server state enable Specify that the filter DHCP server state will be enabled disable Specify that the filter DHCP server state will be disabled ille...

Page 344: ...filter list created on the Switch DGS 3120 24TC admin show filter dhcp_server Command show filter dhcp_server Enabled Ports 1 1 1 10 Trap State Disabled Log State Disabled Illegal Server Log Suppress...

Page 345: ...g filter dhcp_server log disable Success DGS 3120 24TC admin 27 4 config filter dhcp_server trap Description This command is used to enable or disable the log function Format config filter dhcp_server...

Page 346: ...all ports will be used for this configuration Restrictions Only Administrators Operators and Power Users can issue this command Example To create a Filter DHCPv6 server permit entry on port 1 5 DGS 31...

Page 347: ...kets Format config filter dhcpv6_server ports portlist all state enable disable Parameters portlist Enter the list of ports used for this configuration here all Specify that all ports will be used for...

Page 348: ...trators Operators and Power Users can issue this command Example To enable the filter DHCPv6 server trap state DGS 3120 24TC admin config filter dhcpv6_server trap enable Command config filter dhcpv6_...

Page 349: ...pv6addr Parameters ipv6addr Enter the source IPv6 address of the entry here Restrictions Only Administrators Operators and Power Users can issue this command Example To delete permit entry from the fi...

Page 350: ...rmit sip 2200 5 ports 1 5 Command create filter icmpv6_ra_all_node permit sip 2200 5 ports 1 5 Success DGS 3120 24TC admin 27 12 config filter icmpv6_ra_all_node log Description This command is used t...

Page 351: ...uration here all Specify that all ports will be used for this configuration state Specify whether the port s filter ICMPv6 RA all nodes packets function is enabled or disabled enable Specify that the...

Page 352: ...CMPv6 RA all nodes trap state DGS 3120 24TC admin config filter icmpv6_ra_all_node trap enable Command config filter icmpv6_ra_all_node trap enable Success DGS 3120 24TC admin 27 15 show filter icmpv6...

Page 353: ...icmpv6_ra_all_node permit sip ipv6addr Parameters ipv6addr Enter the source IPv6 address of the entry which will be deleted in the filter ICMPv6 RA all nodes forward list Restrictions Only Administrat...

Page 354: ...pv6_relay option_18 state enable disable check enable disable interface_id default cid vendor1 1 show dhcpv6_relay ipif ipif_name 12 config dhcpv6_local_relay vlan vlan_name 32 vlanid vlan_id state en...

Page 355: ...nd disable dhcpv6_relay Success DGS 3120 24TC admin 28 3 config dhcpv6_relay Description The command is used to add or delete an IPv6 address which is a destination to forward relay DHCPv6 packets For...

Page 356: ...hop count of the Switch Format config dhcpv6_relay hop_count value 1 32 Parameters value 1 32 Enter the number of relay agents that have to be relayed in this message The range is from 1 to 32 The de...

Page 357: ...CP packet will be processed based on the behavior defined in the check and remote ID type setting When the state is disabled the DHCP packet is relayed directly to the server Format config dhcpv6_rela...

Page 358: ...y option_18 Description This command is used to configure the processing of Option 18 for the DHCPv6 relay function Both the DHCPv6 relay and DHCPv6 local relay functions use the same Interface ID for...

Page 359: ...18 state enable Command config dhcpv6_relay option_18 state enable Success DGS 3120 24TC admin config dhcpv6_relay option_18 check enable Command config dhcpv6_relay option_18 check enable Success DGS...

Page 360: ...lt DHCPv6 Relay Information Option 37 Remote ID IP Interface System DHCPv6 Relay Status Enabled Server Address 2001 DB8 1234 218 FEFF FEFB CC0E Total Entries 1 DGS 3120 24TC admin 28 9 config dhcpv6_l...

Page 361: ...TC admin 28 10 enable dhcpv6_local_relay Description This command is used to enable the DHCPv6 local relay function on the Switch Format enable dhcpv6_local_relay Parameters None Restrictions Only Adm...

Page 362: ...le dhcpv6_local_relay Command disable dhcpv6_local_relay Success DGS 3120 24TC admin 28 12 show dhcpv6_local_relay Description This command is used to display the current DHCPv6 local relay configurat...

Page 363: ...xStack DGS 3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 358...

Page 364: ..._dbm high_warning mw_or_dbm low_warning mw_or_dbm state enable disable shutdown alarm warning none reload_threshold config ddm power_unit mw dbm show ddm show ddm ports portlist status configuration 2...

Page 365: ...one reload_threshold Parameters portlist Enter the range of ports to be configured here all Specify that all the optic ports operating parameters will be configured temperature_threshold Specify the t...

Page 366: ...he action associated with the alarm is taken mw_or_dbm Enter the high threshold alarm value used here low_alarm Optional Specify the low threshold for the alarm When the operating parameter falls belo...

Page 367: ...ess DGS 3120 24TC admin To configure the port 21 s voltage threshold DGS 3120 24TC admin config ddm ports 1 21 voltage_threshold high_alarm 4 25 low_alarm 2 5 high_warning 3 5 low_warning 3 Command co...

Page 368: ...e alarm DGS 3120 24TC admin config ddm ports 1 21 state enable shutdown alarm Command config ddm ports 1 21 state enable shutdown alarm Success DGS 3120 24TC admin 29 3 config ddm power_unit Descripti...

Page 369: ...tion values of the optic module of the specified ports There are two types of thresholds the administrative configuration and the operation configuration threshold For the optic port when a particular...

Page 370: ...p Previous Page r Refresh To display port 21 s configuration DGS 3120 24TC admin show ddm ports 1 21 configuration Command show ddm ports 1 21 configuration Port 1 21 DDM State Enabled Shutdown Alarm...

Page 371: ...ng all Specify that all the IP interfaces will be used metric Allows the assignment of a DVMRP route cost to the above IP interface A DVMRP route cost is a relative number that represents the real cos...

Page 372: ...5 Command config dvmrp ipif System neighbor_timeout 30 metric 1 probe 5 Success DGS 3120 24TC admin 30 2 enable dvmrp Description This command is used to enable the DVMRP global state on the Switch Fo...

Page 373: ...nd disable dvmrp Success DGS 3120 24TC admin 30 4 show dvmrp Description This command is used to display DVMRP configurations Format show dvmrp ipif ipif_name 12 Parameters ipif Optional Specify the I...

Page 374: ...P neighbor table Format show dvmrp neighbor ipif ipif_name 12 ipaddress network_address Parameters ipif Optional Specify the IP interface name used for the display ipif_name 12 Enter the IP interface...

Page 375: ...next hop table Format show dvmrp nexthop ipaddress network_address ipif ipif_name 12 Parameters ipaddress Optional Specify the IP address and netmask of the destination used network_address Enter the...

Page 376: ...Leaf 30 0 0 0 8 ip2 Leaf Total Entries 6 DGS 3120 24TC admin 30 7 show dvmrp routing_table Description This command is used to display the DVMRP routing table Format show dvmrp routing_table ipaddres...

Page 377: ...C admin show dvmrp routing_table Command show dvmrp routing_table DVMRP Routing Table Source Address Netmask Upstream Neighbor Metric Learned Interface Expire 10 0 0 0 8 10 90 90 90 2 Local System 20...

Page 378: ...NS resolver name server to the Switch Format config name_server add ipaddr ipv6addr primary Parameters ipaddr Enter the DNS Resolver name server IPv4 address used here ipv6addr Enter the DNS Resolver...

Page 379: ...solver name server 10 10 10 1 DGS 3120 24TC admin config name_server delete 10 10 10 10 Command config name_server delete 10 10 10 10 Success DGS 3120 24TC admin 31 3 config name_server timeout Descri...

Page 380: ...NS Resolver name servers and name server time out on the Switch Format show name_server Parameters None Restrictions None Example To display the current DNS Resolver name servers and name server time...

Page 381: ...Administrators Operators and Power Users can issue this command Example To create static host name www example com DGS 3120 24TC admin create host_name www example com 10 10 10 10 Command create host...

Page 382: ...show host_name static dynamic Parameters static Optional Specify to display the static host name entries dynamic Optional Specify to display the dynamic host name entries Restrictions None Example To...

Page 383: ...esolver state of the Switch Format enable dns_resolver Parameters None Restrictions Only Administrators Operators and Power Users can issue this command Example To configure the DNS Resolver state to...

Page 384: ...h CLI Reference Guide 379 Restrictions Only Administrators Operators and Power Users can issue this command Example To configure the DNS Resolver state to disabled DGS 3120 24TC admin disable dns_reso...

Page 385: ...ion_code string 25 unit unit_id 1 6 Parameters string 25 Specify an activation code unit Optional Specify the Switch in the switch stack unit_id 1 6 Enter the unit ID value This value must be between...

Page 386: ...t unit_id 1 6 Parameters unit Optional Specify the Swithc in the switch stack unit_id 1 6 Enter the unit ID value This value must be between 1 and 6 Restrictions None Example To display license inform...

Page 387: ...all state enable disable mode shutdown normal discovery_time sec 5 65535 1 Parameters portlist Specify a range of ports all Specify to select all ports state Specify these ports unidirectional link d...

Page 388: ...n information Format show duld ports portlist Parameters portlist Optional Specify a range of ports Restrictions None Example To show ports 1 4 unidirectional link detection information DGS 3120 24TC...

Page 389: ...eters portlist Specify a range of ports to be configured all Specify to configure all ports state Specify the EEE state The default is disabled enable Enable the EEE function for the specified port s...

Page 390: ...ist Optional Specify a list of ports to be displayed Restrictions None Example To display the EEE state DGS 3120 24TC admin show eee ports 1 1 1 6 1 9 Command show eee ports 1 1 1 6 1 9 Port State 1 1...

Page 391: ...nfig erps log enable disable config erps trap enable disable show erps raps_vlan vlanid 1 4094 sub_ring 35 1 enable erps Description This command is used to enable the global ERPS function on a switch...

Page 392: ...erps Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To disable ERPS DGS 3120 24TC admin disable erps Command disable erps Success D...

Page 393: ...4 delete erps raps_vlan Description This command is used to delete an R APS VLAN on a switch When an R APS VLAN is deleted all parameters related to this R APS VLAN will also be deleted This command...

Page 394: ...an error message will be display and the configuration will fail The R APS VLAN cannot be the protected VLAN The protected VLAN can be one that has already been created or it can be used for a VLAN th...

Page 395: ...er holdoff_time millisecond 0 10000 guard_time millisecond 10 2000 wtr_time min 1 12 Parameters raps_vlan Specify the R APS VLAN used vlanid 1 4094 Enter the VLAN ID used here state Specify to enable...

Page 396: ...e R APS timer used holdoff_time Optional Specify the holdoff time of the R APS function The default holdoff time is 0 milliseconds millisecond 0 10000 Enter the hold off time value here This value mus...

Page 397: ...cess DGS 3120 24TC admin To configure the ERPS timers for a specific R APS VLAN DGS 3120 24TC admin config erps raps_vlan 4094 timer holdoff_time 100 guard_time 1000 wtr_time 10 Command config erps ra...

Page 398: ...re the log state of ERPS events Format config erps log enable disable Parameters log Specify to enable or disable the ERPS log state enable Enter enable to enable the log state disable Enter disable t...

Page 399: ...c is able to be forwarded Blocking indicates that traffic is blocked by ERPS and a signal failure is not detected on the port Signal Fail indicates that a signal failure is detected on the port and tr...

Page 400: ...MEL 2 Holdoff Time 0 milliseconds Guard Time 500 milliseconds WTR Time 5 minutes Current Ring State Idle R APS VLAN 4093 Ring Status Enabled West Port Virtual Channel East Port 10 Forwarding RPL Port...

Page 401: ...tering_mode vlanid vidlist vlan vlan_name 32 36 1 create fdb Description This command is used to create a static entry in the unicast MAC address forwarding table database Format create fdb vlan_name...

Page 402: ...he static forwarding table port The port number corresponding to the MAC destination address The switch will always forward traffic to the specified device through this port port Enter the port number...

Page 403: ...ctions Only Administrator Operator and Power User level users can issue this command Example To create a multicast MAC forwarding entry to the default VLAN DGS 3120 24TC admin create multicast_fdb def...

Page 404: ...y the FDB age out time in seconds The aging time affects the learning process of the Switch Dynamic forwarding table entries which are made up of the source MAC addresses and their associated port num...

Page 405: ...imum name length is 32 vlan_name 32 The VLAN name can be up to 32 characters long all Specify all configured VLANs forward_all_groups Both the registered group and the unregistered group will be forwa...

Page 406: ...DGS 3120 24TC admin delete fdb default 00 00 00 00 01 02 Command delete fdb default 00 00 00 00 01 02 Success DGS 3120 24TC admin 36 8 clear fdb Description This command is used to clear the Switch s...

Page 407: ...tch Format show multicast_fdb vlan vlan_name 32 vlanid vidlist mac_address macaddr Parameters vlan Optional The name of the VLAN on which the MAC address resides vlan_name 32 Enter the VLAN name here...

Page 408: ...a specified port port Enter the port number here vlan Optional Displays the entries for a specific VLAN The maximum name length is 32 vlan_name 32 Enter the VLAN name here The VLAN name can be up to...

Page 409: ...ity VID MAC Address Port Type Status Security Module 1 00 00 00 10 00 01 1 1 Dynamic Drop 802 1X 1 00 00 00 10 00 02 1 2 Static Forward WAC 1 00 00 00 10 00 04 1 4 Static Forward Port Security 1 00 00...

Page 410: ...name can be up to 32 characters long If no parameter is specified the device will show all multicast filtering settings in the device Restrictions None Example To show the multicast vlan_filtering_mod...

Page 411: ...isable Parameters portlist Specify the list of ports used all Specify that all the ports will be used for the configuration state Specify the state of the filter to block the NETBIOS packet enable Spe...

Page 412: ...ilter extensive_netbios portlist all state enable disable Parameters portlist Enter the list of ports used for this configuration here all Specify that all the ports will be used this configuration st...

Page 413: ...This command is used to display the extensive netbios state on the Switch Format show filter extensive_netbios Parameters None Restrictions None Example To display the extensive_state created on the...

Page 414: ...pathname copy unit unit_id drive_id pathname unit unit_id drive_id pathname format unit unit_id drive_id fat16 fat32 label_name 38 1 show storage_media_info Description This command is used to display...

Page 415: ...rive unit unit_id drive_id Parameters unit Optional Specify a unit ID if in the stacking system If not specified it refers to the master unit unit_id Enter the unit ID value This value must be between...

Page 416: ...e this command Example To make a directory DGS 3120 24TC admin md c abc Command md c abc Success DGS 3120 24TC admin 38 4 rd Description This command is used to remove a directory If there are files s...

Page 417: ...is not specified Format cd pathname Parameters pathname Optional Specify the directory to be removed The path name can be specified either as a full path name or partial name For partial path name it...

Page 418: ...Attr Size Update Time Name 1 CFG rw 29661 2000 04 01 05 54 38 config cfg 2 RUN rw 4879040 2000 03 26 03 15 11 B019 had 3 d 0 2000 04 01 05 17 36 system 29618 KB total 24727 KB free with boot up info b...

Page 419: ...ory are softly deleted sequentially only the last one will exist Deleting copying renaming or moving the already softly deleted file is not acceptable System will prompt if the target file is a firmwa...

Page 420: ...dmin dir Command dir Directory of unit2 c Idx Info Attr Size Update Time Name 1 CFG rw 29661 2000 04 01 05 54 38 config cfg 2 RUN rw 4879040 2000 03 26 03 15 11 B019 had 3 d 0 2000 04 01 05 17 36 syst...

Page 421: ...nfo Attr Size Update Time Name 1 CFG b rw 29661 2000 04 02 06 03 19 config2 cfg 2 CFG rw 29661 2000 04 01 05 54 38 config cfg 3 RUN rw 4879040 2000 03 26 03 15 11 B019 had 4 d 0 2000 04 01 05 17 36 sy...

Page 422: ...Specify a unit ID if in the stacking system If not specified it refers to the master unit unit_id Enter the unit ID value This value must be between 1 and 6 drive_id Optional Enter the drive ID used...

Page 423: ...onal Enter the drive ID Examples are C or D pathname Specify the file to copy to The path name can be specified either as a full path name or partial name For partial path name it indicates the file i...

Page 424: ...net Switch CLI Reference Guide 419 Restrictions Only Administrator and Operator level users can issue this command Example To format a drive DGS 3120 24TC admin format d fat32 aaaa Command format d fa...

Page 425: ...nable or disable the sending of gratuitous ARP when the IP interface s status is up This is used to automatically announce the interface s IP address to other nodes Only one gratuitous ARP packet will...

Page 426: ...default value Restrictions Only Administrator Operator and Power User level users can issue this command Example To enable send gratuitous ARP request when duplicate IP is detected DGS 3120 24TC admi...

Page 427: ...p send periodically Description The command is used to configure the interval for periodical sending of gratuitous ARP request packet By default the interval is 0 Format config gratuitous_arp send per...

Page 428: ...erface name of L3 interface ipif_name 12 Enter the IP interface name here This name can be up to 12 characters long trap Specify to enable the trap function log Specify to enable the log function Rest...

Page 429: ...r User level users can issue this command Example To disable system interface s gratuitous ARP log and trap DGS 3120 24TC admin disable gratuitous_arp ipif System trap log Command disable gratuitous_a...

Page 430: ...show gratuitous_arp Command show gratuitous_arp Send on IPIF Status Up Enabled Send on Duplicate IP Detected Enabled Gratuitous ARP Learning Enabled IP Interface Name System Gratuitous ARP Trap Enable...

Page 431: ...IP interface name used for this configuration ipif_name 12 Enter the IP interface name used for this configuration here This name can be up to 12 characters long all Specify that all the IP interfaces...

Page 432: ...nfig igmp ipif System version 1 state enable Success DGS 3120 24TC admin To configure IGMPv2 for all IP interfaces DGS 3120 24TC admin config igmp all version 2 Command config igmp all version 2 Succe...

Page 433: ...show igmp group Description This command is used to display the switch s IGMP group table Format show igmp group group multicast_ipaddr ipif ipif_name 12 Parameters group Optional Specify the multicas...

Page 434: ...erface will be checked to determine whether its source IP is in the same network as the interface If the check failed for a received report or leave message the message won t be processed by IGMP prot...

Page 435: ...nal Specify the IP interface name to be displayed ipif_name 12 Enter the IP interface name to be displayed here This name can be up to 12 characters long If no parameter is specified the system will d...

Page 436: ...p static_group ipif ipif_name 12 group multicast_ipaddr Parameters ipif_name 12 Enter the IP interface name used for this configuration This name can be up to 12 characters long group Specify the mult...

Page 437: ...delete the IGMP static group with the multicast IP address 225 0 0 2 on the IP interface System DGS 3120 24TC admin delete igmp static_group ipif System group 255 0 0 2 Command delete igmp static_gro...

Page 438: ...c groups on the interface n20 DGS 3120 24TC admin show igmp static_group ipif n20 Command show igmp static_group ipif n20 Interface Multicast Group n20 239 0 0 3 Total Entries 1 DGS 3120 24TC admin To...

Page 439: ...urce_ip ipaddr unsolicited_report_interval sec 0 25 1 show igmp_proxy group 41 1 enable igmp_proxy Description This command is used to enable the IGMP proxy on the switch Format enable igmp_proxy Para...

Page 440: ...snooping enabled VLAN Format config igmp_proxy downstream_if add delete vlan vlan_name 32 vlanid vidlist Parameters add Specify to add a downstream interface delete Specify to delete a downstream inte...

Page 441: ...eport_interval sec 0 25 1 Parameters vlan Specify the VLAN for the upstream interface vlan_name 32 Specify a VLAN name between 1 and 32 characters vlanid Specify the VLAN ID for the upstream interface...

Page 442: ...means group entry is determined by whether or not the chip is inserted Format show igmp_proxy group Parameters group Optional Specify the group information If the group is not specified the IGMP prox...

Page 443: ...Guide 438 DGS 3120 24TC admin show igmp_proxy group Command show igmp_proxy group Dest V The destination VLAN A Active I Inactive Dest IP Source IP Dest V Member Ports Status 224 2 2 2 NULL 4 3 6 A 2...

Page 444: ..._interval sec 1 65535 max_response_time sec 1 25 robustness_variable value 1 7 last_member_query_interval sec 1 25 state enable disable version value 1 3 1 config igmp access_authentication ports all...

Page 445: ...of link layer topology changes caused by Spanning Tree operation or not ignore Specify that IGMP snooping will ignore link layer topology changes caused by Spanning Tree operation General queries won...

Page 446: ...ket that the Switch can process on a specific port VLAN The rate is specified in packets per second The packets that exceed the limit will be dropped no_limit Configure the rate of the IGMP control pa...

Page 447: ...calculated as follows robustness variable x query interval 1 x query response interval Other querier present interval Amount of time that must pass before a multicast router decides that there is no...

Page 448: ...tication ports Description This command is used to enable or disable the IGMP Access Control function for the specified ports If the IGMP Access Control function is enabled and the Switch receives an...

Page 449: ...ameters vlan_name 32 Specify the name of the VLAN on which the router port resides vlanid Specify the ID of the VLAN on which the router port resides vlanid_list Enter the VLAN ID here add Specify to...

Page 450: ...list Specify a range of ports to be configured Restrictions Only Administrator Operator and Power User level users can issue this command Example To set up port range 1 10 to forbidden router ports of...

Page 451: ...can issue this command Example To disable IGMP snooping on the Switch DGS 3120 24TC admin disable igmp_snooping Command disable igmp_snooping Success DGS 3120 24TC admin 42 9 create igmp_snooping stat...

Page 452: ...ly Administrator Operator and Power User level users can issue this command Example To create an IGMP snooping static group for VLAN 1 group 239 1 1 1 DGS 3120 24TC admin create igmp_snooping static_g...

Page 453: ...ber port learned by IGMP If this port is configured as a static member later then the IGMP protocol will stop operating on this port The IGMP protocol will resume once this port is removed from static...

Page 454: ...ulticast group static members Format show igmp_snooping static_group vlan vlan_name 32 vlanid vlanid_list ipaddr Parameters vlan Specify the name of the VLAN on which the static group resides vlan_nam...

Page 455: ...ts are learned later the entry will become an ordinary IGMP snooping entry That is the aging out mechanism will follow the ordinary IGMP snooping entry Format config igmp_snooping data_driven_learning...

Page 456: ...op the learning of the new data driven groups Traffic for the new groups will be dropped Format config igmp_snooping data_driven_learning max_learned_entry value 1 1024 Parameters max_learned_entry Sp...

Page 457: ...the group s IP address learned by data driven all Delete all IGMP snooping groups of specified VLANs Restrictions Only Administrator Operator and Power User level users can issue this command Example...

Page 458: ...Query Interval 125 Max Response Time 10 Robustness Value 2 Last Member Query Interval 1 Querier State Disabled Querier Role Non Querier Querier IP 0 0 0 0 Querier Expiry Time 0 secs State Disabled Fas...

Page 459: ...ist ports portlist ipaddr data_driven Parameters vlan Optional Specify the name of the VLAN for which you want to view IGMP snooping group information If VLAN ports and IP address are not specified th...

Page 460: ...urce Group 10 0 0 10 225 0 0 1 VLAN Name VID default 1 Member Ports 1 5 UP Time 6 Expiry Time 254 Filter Mode INCLUDE Source Group NULL 239 255 255 250 VLAN Name VID default 1 Member Ports 1 5 UP Time...

Page 461: ...Time 9 Expiry Time 259 Filter Mode EXCLUDE Source Group NULL 226 0 0 3 VLAN Name VID default 1 Member Ports Router Ports UP Time 1 Expiry Time 259 Filter Mode EXCLUDE Source Group NULL 239 255 255 250...

Page 462: ...ooping forwarding table entries of the Switch Restrictions None Example To show all IGMP snooping forwarding entries located on the Switch DGS 3120 24TC admin show igmp_snooping forwarding Command sho...

Page 463: ...ured forbidden Optional Displays forbidden router ports that have been statically configured If no parameter is specified the system will display all currently configured router ports on the Switch Re...

Page 464: ...show igmp_snooping statistics counter vlanid 1 Command show igmp_snooping statistics counter vlanid 1 VLAN Name default Group Number 10 Receive Statistics Query IGMP v1 Query 1 IGMP v2 Query 1 IGMP v...

Page 465: ...atistics Query IGMP v1 Query 0 IGMP v2 Query 0 IGMP v3 Query 0 Total 0 Dropped By Rate Limitation 0 Dropped By Multicast VLAN 0 Report Leave IGMP v1 Report 0 IGMP v2 Report 100 IGMP v3 Report 0 IGMP v...

Page 466: ...one Example To display the IGMP Access Control status for ports 1 4 DGS 3120 24TC admin show igmp access_authentication ports 1 1 1 4 Command show igmp access_authentication ports 1 1 1 4 Port State 1...

Page 467: ...All 42 23 clear igmp_snooping statistics counter Description This command is used to clear the IGMP snooping statistics counter Format clear igmp_snooping statistics counter Parameters None Restricti...

Page 468: ...cp_snoop ipv6 all disable address_binding dhcp_snoop ipv6 all clear address_binding dhcp_snoop binding_entry ports portlist all ipv6 all show address_binding dhcp_snoop max_entry ports portlist show a...

Page 469: ...list of ports used for this configuration here all Specify that all the ports will be included Restrictions Only Administrator Operator and Power User level users can issue this command Example To cre...

Page 470: ...ify whether to allow ARP packets with a source IP address of 0 0 0 0 If the IP address 0 0 0 0 is not configured in the binding list and this setting is enabled ARP packets with the source IP address...

Page 471: ...o all the ports Restrictions Only Administrator Operator and Power User level users can issue this command Example To create a static IPv6 IMPB entry that binds the IPv6 address fe80 240 5ff fe00 28 t...

Page 472: ...fe80 240 5ff fe00 28 mac_address 00 00 00 00 00 11 Command config address_binding ip_mac ipv6address FE80 240 5FF FE00 28 mac_address 00 00 00 00 00 11 Success DGS 3120 24TC admin 43 5 delete address...

Page 473: ...of the entry in the database ipaddr Enter the IP address used mac_address Specify the MAC address used for this configuration macaddr Enter the MAC address used ipv6address Specify the learned IPv6 a...

Page 474: ...ere all Specify that all the ports will be used Restrictions Only Administrator Operator and Power User level users can issue this command Example To configure an IMPB entry DGS 3120 24TC admin config...

Page 475: ...op Learning Threshold Mode 1 Disabled Disabled Disabled All Not Allow Forward 500 Normal 2 Disabled Disabled Disabled All Not Allow Forward 500 Normal 3 Disabled Disabled Disabled All Not Allow Forwar...

Page 476: ...g blocked all VID VLAN Name MAC Address Port 1 default 00 0C 6E AA B9 C0 1 1 Total Entries 1 DGS 3120 24TC admin 43 10 show address_binding ip_mac Description This command is used to display the IMPB...

Page 477: ...the port The auto learned IMPB entry will be mapped to a specific source port based on the MAC address learning function This entry will be created as an IP Inspection mode binding entry for this spe...

Page 478: ...Administrator Operator and Power User level users can issue this command Example To enable DHCP IPv4 snooping mode DGS 3120 24TC admin enable address_binding dhcp_snoop Command enable address_binding...

Page 479: ...ortlist Enter the list of ports used all Specify that all the ports will be used ipv6 Optional Specify that IPv6 entries will be cleared all Optional Specify that all entries will be cleared Restricti...

Page 480: ...overy Time 300 Seconds DGS 3120 24TC admin To display DHCP snooping maximun entry configuration DGS 3120 24TC admin show address_binding dhcp_snoop max_entry Command show address_binding dhcp_snoop ma...

Page 481: ...g binding entries DGS 3120 24TC admin show address_binding dhcp_snoop binding_entry Command show address_binding dhcp_snoop binding_entry S Status A Active I Inactive Time Left Time sec IP Address MAC...

Page 482: ...No Limit 1 6 No Limit 1 7 No Limit 1 8 No Limit 1 9 No Limit 1 10 No Limit 1 11 No Limit 1 12 No Limit 1 13 No Limit 1 14 No Limit 1 15 No Limit 1 16 No Limit 1 17 No Limit 1 18 No Limit 1 19 No Limi...

Page 483: ...C admin config address_binding dhcp_snoop max_entry ports 1 1 1 3 limit 10 Command config address_binding dhcp_snoop max_entry ports 1 1 1 3 limit 10 Success DGS 3120 24TC admin 43 18 config address_b...

Page 484: ...binding nd_snoop Description This command is used to enable ND snooping on the switch Format enable address_binding nd_snoop Parameters None Restrictions Only Administrator Operator and Power User lev...

Page 485: ...he maximum number of entries that can be learned on a port with ND snooping Format config address_binding nd_snoop ports portlist all max_entry value 1 50 no_limit Parameters ports Specify the list of...

Page 486: ...g nd_snoop ports portlist Parameters ports Optional Specify the list of ports used for this display portlist Enter the list of ports used for this display here Restrictions None Example To show the ND...

Page 487: ...binding nd_snoop binding_entry Command show address_binding nd_snoop binding_entry S Status A Active I Inactive Time Left Time sec IP Address MAC Address S LT sec Port 2001 2222 1111 7777 5555 6666 77...

Page 488: ...S 3120 24TC admin 43 25 enable address_binding trap_log Description This command is used to send traps and logs when the IMPB module detects an illegal IP and MAC address Format enable address_binding...

Page 489: ...isable address_binding trap_log Success DGS 3120 24TC admin 43 27 config address_binding recover_learning Description This command is used to recover IMPB checking Format config address_binding recove...

Page 490: ...n interface can receive per second value 1 2048 Enter the value between 1 and 2048 mode Specify the DHCP protection mode The default is shutdown drop Drop all the above rate limit DHCP packets when th...

Page 491: ...timer 1000 Success DGS 3120 24TC admin 43 30 enable address_binding roaming Description This command is used to enable IMPB roaming When a client was authenticated on the specified port using the DHCP...

Page 492: ...MAC address learned at port 1 will not have chance to change to port 2 until the IMPB entry aged out NOTE For an inactive entry whether the roaming state is enabled or not it detects whether a new AR...

Page 493: ...ing table DGS 3120 24TC admin download address_binding snoop_entry_fromTFTP 10 90 90 6 filename impb cfg Command download address_binding snoop_entry_fromTFTP 10 90 90 6 filename impb cfg Connecting t...

Page 494: ...upload address_binding snoop_entry_toTFTP 10 90 90 6 filename impb cfg Connecting to server Done Upload DHCP Snooping Entry Done DGS 3120 24TC admin 43 34 save dhcp_snoop_entry Description This comman...

Page 495: ...ticast interface that will be displayed ipif_name 12 Enter the IP Multicast interface name that will be displayed here This name can be up to 12 characters long protocol Optional Specify which kind of...

Page 496: ...lue here ipaddress Optional Specify the network address used here network_address Enter the network address used here Restrictions None Example To display the IP multicast forwarding cache DGS 3120 24...

Page 497: ...pif_name 12 route_source list_name 16 set add delete next_hop ipaddr metric uint 0 4294967294 metric_type type_1 type_2 delete route_map map_name map_name 16 all_seqence all show route_map map_name 16...

Page 498: ...rator Operator and Power User level users can issue this command Example To add an entry to the access list DGS 3120 24TC admin config ip standard access_list list1 add 10 10 10 0 24 permit Command co...

Page 499: ...o display the information of an access list Format show ip standard access_list list_name 16 Parameters list_name16 Optional Enter the name of the access list Restrictions None Example To display the...

Page 500: ...Format config route_map map_name 16 add delete sequence value 1 65535 deny permit sequence value 1 65535 match add delete ip next_hop address list_name 16 metric uint 0 4294967294 route_type internal...

Page 501: ...fy to set the next hop of the routes ipaddr Enter the IP address of the next hop metric Specify to set the metric of the routes uint 0 4294967294 Enter the value of the metric metric_type Specify to s...

Page 502: ...an issue this command Example To delete the route map DGS 3120 24TC admin delete route_map map_name map1 Command delete route_map map_name map1 Success DGS 3120 24TC admin 45 8 show route_map Descript...

Page 503: ...Ethernet Switch CLI Reference Guide 498 DGS 3120 24TC admin show route_map Command show route_map route_map map1 sequence 10 Permit Match clauses Set clauses sequence 20 Permit Match clauses Set claus...

Page 504: ...12 ipaddress network_address ipv6address ipv6networkaddr source ipaddr ipv6addr destination ipaddr ipv6addr show ip_tunnel tunnel_name 12 enable ip_tunnel tunnel_name 12 disable ip_tunnel tunnel_name...

Page 505: ...ed to configure an IPv6 manual tunnel If this tunnel has previously been configured in another mode the tunnel s information will still exist in the database However whether the tunnel s former inform...

Page 506: ...2001 1 64 Success DGS 3120 24TC admin 46 4 config ip_tunnel 6to4 Description This command is used to configure an existing IPv6 tunnel as an IPv6 6to4 tunnel on the switch If this tunnel has previousl...

Page 507: ...pv6address 2002 A00 1 1 64 source 10 0 0 1 Command config ip_tunnel 6to4 tn2 ipv6address 2002 A00 1 1 64 source 10 0 0 1 Success DGS 3120 24TC admin 46 5 config ip_tunnel isatap Description This comma...

Page 508: ...l exist in the database However whether the tunnel s former information is valid or not depends on the current mode GRE tunnels are simple point to point tunnels that can be used within a site or betw...

Page 509: ...interface s IPv4 address 2 0 0 1 8 DGS 3120 24TC admin config ip_tunnel gre tn1 source 1 0 0 1 destination 1 0 0 2 Command config ip_tunnel gre tn1 source 1 0 0 1 destination 1 0 0 2 Success DGS 3120...

Page 510: ...unnel Mode ISATAP IPv6 Link Local Address FE80 5EFE A00 1 128 IPv6 Global Unicast Address 2001 5EFE A00 1 64 Tunnel Source 10 0 0 1 Tunnel Destination Unknown DGS 3120 24TC admin 46 8 enable ip_tunnel...

Page 511: ...ecified IP tunnel or all IP tunnels on the Switch Format disable ip_tunnel tunnel_name 12 Parameters tunnel_name 12 Optional Enter the IP tunnel interface name used here This name can be up to 12 char...

Page 512: ...e disable other_config_flag enable disable min_rtr_adv_interval sec 3 1350 max_rtr_adv_interval sec 4 1800 1 RI Mode Only config ipv6 nd ra prefix_option ipif ipif_name 12 ipv6networkaddr preferred_li...

Page 513: ...6 interface name ipif_name 12 Enter the IP interface name here This name can be up to 12 characters long all Specify that all the interfaces will be used in this configuration ipv6addr The neighbor s...

Page 514: ...d dynamic entries Restrictions None Example Show all neighbor cache entries of IP interface System DGS 3120 24TC admin show ipv6 neighbor_cache ipif System all Command show ipv6 neighbor_cache ipif Sy...

Page 515: ...etrans_time 1000000 Command config ipv6 nd ns ipif Zira retrans_time 1000000 Success DGS 3120 24TC admin 47 5 show ipv6 nd Description This command is used to display information regarding neighbor de...

Page 516: ...IPv6 header for packets sent by hosts that receive this RA message value 0 255 Specify the value between 0 and 255 managed_flag Specify to enable or disable the function enable When set to enable it...

Page 517: ...etween 0 and 4294967295 milliseconds For an infinite valid lifetime the value can be set to 4294967295 valid_life_time Specify the number of seconds that an address based on the specified prefix using...

Page 518: ...of prefix option to be 1000 seconds for the prefix 3ffe 501 ffff 100 64 which is the prefix of the ip1 interface DGS 3120 24TC admin config ipv6 nd ra prefix_option ipif ip1 3ffe 501 ffff 100 64 pref...

Page 519: ...fault route ipv6networkaddr Specify the destination network of the route RI and EI Mode Only ipif_name 12 Specify the interface for the route This name can be up to 12 characters long ipv6addr Specify...

Page 520: ...Specify the default route ipv6networkaddr The destination network of the route RI and EI Mode Only ipif_name 12 Enter the IP interface name used here This name can be up to 12 characters long ipv6add...

Page 521: ...only the RIPng route entries RI Mode Only ospfv3 Optional Specify to display only the OSPFv3 route entries RI Mode Only hardware Optional Specify to display only the route entries which have been wro...

Page 522: ...s portlist all state enable disable max_authenticating_host value 0 50 aging_time infinite min 1 1440 idle_time infinite min 1 1440 block_time sec 0 300 1 show jwac ports portlist config jwac radius_p...

Page 523: ...ship change by JWAC after a host passes authentication The RADIUS server will share the server configuration defined by the 802 1X command set Format enable jwac Parameters None Restrictions Only Admi...

Page 524: ...e static FDB correctly before it can work properly Format config jwac quarantine_server_url string 128 ipv6 string 128 clear_quarantine_server_url ipv6 Parameters quarantine_server_url Specify the ent...

Page 525: ...TP Port 80 HTTP UDP Filtering Enabled Forcible Logout Enabled Redirect State Enabled Redirect Delay Time 1 Seconds Redirect Destination Quarantine Server Quarantine Server Quarantine Server IPv6 Q Ser...

Page 526: ...rator Operator and Power User level users can issue this command Example To enable JWAC redirect DGS 3120 24TC admin enable jwac redirect Command enable jwac redirect Success DGS 3120 24TC admin 49 6...

Page 527: ...n_page Specify the unauthenticated host will be redirected to the jwac_login_page delay_time Specify the time interval after which the unauthenticated host will be redirected sec 0 10 Specify the time...

Page 528: ...ample To enable JWAC forcible logout DGS 3120 24TC admin enable jwac forcible_logout Command enable jwac forcible_logout Success DGS 3120 24TC admin 49 9 disable jwac forcible_logout Description This...

Page 529: ...abled all UDP and ICMP packets except DHCP and DNS packets from unauthenticated hosts will be dropped Format enable jwac udp_filtering Parameters None Restrictions Only Administrator Operator and Powe...

Page 530: ...When enabled the JWAC switch will monitor the quarantine server to ensure the server is okay If the Switch detects no quarantine server it will redirect all unauthenticated HTTP accesses to the JWAC L...

Page 531: ...ommand disable jwac quarantine_server_monitor Success DGS 3120 24TC admin 49 14 config jwac quarantine_server_error_timeout Description This command is used to set the quarantine server error timeout...

Page 532: ...at config jwac virtual_ip ipaddr ipv6addr url string 128 clear Parameters ipaddr Specify the IP address of the virtual IP ipv6addr Specify the Ipv6 address of the virtual IP url Optional Specify the U...

Page 533: ...for the update server network ipv6networkaddr To set a specific IPv6 network address use to separate the IPv6 address and the number of network mask bits If TCP port or UDP port number is not specifi...

Page 534: ...fig jwac ports portlist all state enable disable max_authenticating_host value 0 50 aging_time infinite min 1 1440 idle_time infinite min 1 1440 block_time sec 0 300 1 Parameters portlist Specify a po...

Page 535: ...value is 60 seconds sec 0 300 Specify a blocking time value between 0 and 300 Restrictions Only Administrator Operator and Power User level users can issue this command Example To configure the JWAC p...

Page 536: ...command supports the protocol Format config jwac radius_protocol local eap_md5 pap chap ms_chap ms_chapv2 Parameters local Specify the JWAC switch uses the local user DB to complete the authentication...

Page 537: ...D value must be between 1 and 4094 Restrictions Only Administrator Operator and Power User level users can issue this command Example To create a JWAC user in the local database DGS 3120 24TC admin cr...

Page 538: ...min 49 23 delete jwac Description This command is used to delete JWAC users from the local database Format delete jwac user username 15 all_users Parameters user Specify the user name to be deleted us...

Page 539: ...show jwac user Command show jwac user User Name Password VID 112233 12345 123 123 1 Total Entries 2 DGS 3120 24TC admin 49 25 clear jwac auth_state Description This command is used to clear authentic...

Page 540: ...e To delete authentication entries DGS 3120 24TC admin clear jwac auth_state ports all blocked Command clear jwac auth_state ports all blocked Success DGS 3120 24TC admin 49 26 show jwac auth_state po...

Page 541: ...When the authorization is enabled for JWAC s RADIUS the authorized data assigned by the RADUIS server will be accepted if the global authorization network is enabled When the authorization is enabled...

Page 542: ...pdate_server Description This command is used to display the JWAC update server Format show jwac update_server Parameters None Restrictions None Example To display the JWAC update server DGS 3120 24TC...

Page 543: ...rd_title Specify the password title of the authenticate page desc 16 Specify the password title of the authenticate page The password title description can be up to 16 characters long logout_window_ti...

Page 544: ...tor and Power User level users can issue this command Example To customize the authenticate page DGS 3120 24TC admin config jwac authenticate_page japanese Command config jwac authenticate_page japane...

Page 545: ...e_page Current Page English Version English Page Element Page Title Login Window Title Authentication Login User Name Title User Name Password Title Password Logout Window Title Logout from the networ...

Page 546: ...bo frame setting as enable Format enable jumbo_frame Parameters None Restrictions Only Administrator and Operator level users can issue this command Example To enable the Jumbo frame DGS 3120 24TC adm...

Page 547: ...0 24TC admin disable jumbo_frame Command disable jumbo_frame Success DGS 3120 24TC admin 50 3 show jumbo_frame Description This command is used to display the current configuration of jumbo frame Form...

Page 548: ...unnel uni nni 51 1 enable l2protocol_tunnel Description This command is used to enable the Layer 2 protocol tunneling function Format enable l2protocol_tunnel Parameters None Restrictions Only Adminis...

Page 549: ...01 05 5D 00 00 00 for GVRP is 01 05 5D 00 00 21 for Layer 2 protocols MAC 01 00 0C CC CC CC is 01 05 5D 00 00 10 and for protocol MAC 01 00 0C CC CC CD is 01 05 5D 00 00 11 When QinQ is enabled an S...

Page 550: ...strictions Only Administrator Operator and Power User level users can issue this command Example To configure the STP tunneling on ports 1 4 DGS 3120 24TC admin config l2protocol_tunnel ports 1 1 1 4...

Page 551: ...show l2protocol_tunnel Global State Enabled UNI Ports 1 1 1 4 NNI Ports DGS 3120 24TC admin To show Layer 2 protocol tunneling information summary DGS 3120 24TC admin show l2protocol_tunnel uni Comma...

Page 552: ...1 create link_aggregation group_id Description This command is used to create a link aggregation group on the Switch Format create link_aggregation group_id value 1 32 type lacp static Parameters grou...

Page 553: ...n group Format config link_aggregation group_id value 1 32 master_port port ports portlist state enable disable trap enable disable Parameters group_id Specify the group id The group number identifies...

Page 554: ...r_port 1 5 ports 1 5 1 7 Success DGS 3120 24TC admin 52 4 config link_aggregation algorithm Description This command is used to configure the part of the packet examined by the Switch when selecting t...

Page 555: ...5 show link_aggregation Description This command is used to display the current link aggregation configuration on the Switch Format show link_aggregation group_id value 1 32 algorithm Parameters grou...

Page 556: ...1 5 1 7 Active Port 7 Status Enabled Flooding Port 7 Trap Disabled Total Entries 1 DGS 3120 24TC admin Link aggregation group enable and no member linkup DGS 3120 24TC admin show link_aggregation Com...

Page 557: ...used to configure per port LACP mode Format config lacp_port portlist mode active passive Parameters lacp_port Specified a range of ports to be configured portlist Enter the list of port used for the...

Page 558: ...sed for this configuration here If no parameter specified the system will display current LACP and all port status Restrictions None Example To show port LACP mode DGS 3120 24TC admin show lacp_port C...

Page 559: ...w lldp mgt_addr ipv4 ipaddr ipv6 ipv6addr show lldp ports portlist show lldp local_ports portlist mode brief normal detailed show lldp remote_ports portlist mode brief normal detailed show lldp statis...

Page 560: ...e LLDP DGS 3120 24TC admin enable lldp Command enable lldp Success DGS 3120 24TC admin 53 2 disable lldp Description This command is used to stop sending and receiving of LLDP advertisement packet For...

Page 561: ...between 2 and 10 tx_delay Specify the minimum interval between sending of LLDP messages due to constantly change of MIB content The default setting 2 seconds sec 1 8192 Enter the transmit delay value...

Page 562: ...e basic_tlvs all port_description system_name system_description system_capabilities enable disable port_Id_subtype mac_address local dot1_tlv_pvid enable disable dot1_tlv_protocol_vid vlan all vlan_n...

Page 563: ...disable Specify that the basic TLV data types used from outbound LLDP advertisements will be disabled port_Id_subtype Specify the port ID TLV sub type The default subtype is local mac_address Specify...

Page 564: ...e indicates it is possible for two ends of an IEEE 802 3 link to be configured with different duplex and or speed settings and still establish some limited network connectivity More precisely the info...

Page 565: ...GS 3120 24TC admin config lldp ports all basic_tlvs system_name enable Command config lldp ports all basic_tlvs system_name enable Success DGS 3120 24TC admin To configure exclude the vlan nameTLV fro...

Page 566: ..._identity all enable Success DGS 3120 24TC admin To configure exclude the MAC PHY configuration status TLV from the outbound LLDP advertisements for all ports DGS 3120 24TC admin config lldp ports all...

Page 567: ...ion status Format show lldp Parameters None Restrictions None Example To display the LLDP system level configuration status Command show lldp LLDP System Information Chassis ID Subtype MAC Address Cha...

Page 568: ...Pv6 address used for this configuration here Restrictions None Example To display management address information DGS 3120 24TC admin show lldp mgt_addr ipv4 192 168 254 10 Command show lldp mgt_addr i...

Page 569: ...ed Management Address None Port VLAN ID Disabled Enabled Port_and_Protocol_VLAN_ID None Enabled VLAN Name None Enabled Protocol_Identity None MAC PHY Configuration Status Disabled Link Aggregation Dis...

Page 570: ...ode detailed Port ID 1 1 Port ID Subtype MAC Address Port ID 00 01 02 03 04 01 Port Description D Link DGS 3120 24TC R2 00 010 Port 1 on Unit 1 Port PVID 1 Management Address Count 2 Subtype IPv4 Addr...

Page 571: ...nt Address Count 2 PPVID Entries Count 0 VLAN Name Entries Count 1 Protocol Identity Entries Count 0 MAC PHY Configuration Status See Detail Link Aggregation See Detail Maximum Frame Size 1536 DGS 312...

Page 572: ...S 3120 24TC admin show lldp remote_ports 1 1 1 2 mode brief Command show lldp remote_ports 1 1 1 2 mode brief Port ID 1 Remote Entities count 3 Entity 1 Chassis ID Subtype MACADDRESS Chassis ID 00 01...

Page 573: ...nit 1 System Name Switch1 System Description Stackable Ethernet Switch System Capabilities Repeater Bridge Management Address count 1 Port VLAN ID 1 PPVID Entries count 5 VLAN Name Entries count 3 Pro...

Page 574: ...e LOCAL Port ID 1 3 Port Description RMON Port 3 on Unit 1 System Name Switch1 System Description Stackable Ethernet Switch System Capabilities Repeater Bridge Management Address 10 90 90 91 Port VLAN...

Page 575: ...P MAC PHY Configuration Status Auto negotiation support supported Auto negotiation status enabled Auto negotiation advertised capability xxxx hex Auto negotiation operational MAU type 0010 hex Power V...

Page 576: ...meters None Restrictions None Example To display global statistics information DGS 3120 24TC admin show lldp statistics Command show lldp statistics Last Change Time 6094 Number of Table Insert 1 Numb...

Page 577: ...utsTotal 0 DGS 3120 24TC admin 53 14 config lldp_med fast_start repeat_count Description This command is used to configure the fast start repeat count When an LLDP MED Capabilities TLV is detected for...

Page 578: ...s disabled Restrictions Only Administrator and Operator level users can issue this command Example To enable the log state of LLDP MED events DGS 3120 24TC admin config lldp_med log state enable Comma...

Page 579: ...e s objects in the LLDP MED MIB corresponding to the respective port will not be populated Format config lldp_med ports portlist all med_transmit_capabilities all capabilities network_policy power_pse...

Page 580: ...This command is used to display LLDP MED per port configuration for advertisement options Format show lldp_med ports portlist Parameters portlist Optional Specify a range of ports to be displayed If...

Page 581: ...d LLDP MED System Information Device Class Network Connectivity Device Hardware Revision B1 Firmware Revision 3 00 501 Software Revision 4 00 015 Serial Number PVT93CB000001 Manufacturer Name D Link M...

Page 582: ...local_ports 1 1 Command show lldp_med local_ports 1 1 Port ID 1 1 LLDP MED Capabilities Support Capabilities Support Network Policy Support Location Identification Not Support Extended Power Via MDI P...

Page 583: ...ED capabilities LLDP MED Device Class Endpoint Device Class III LLDP MED Capabilities Support Capabilities Support Network Policy Support Location Identification Support Extended Power Via MDI Support...

Page 584: ...cation Subtype CivicAddress Location Information Extended Power Via MDI Power Device Type PD Device Power Priority High Power Source From PSE Power Request 8 Watts Inventory Management Hardware Revisi...

Page 585: ...m is disabled a user would need to manually recover a disabled port The default value for the recover timer is 60 seconds 0 0 is a special value that specifies that the auto recovery mechanism should...

Page 586: ...ters ports Specify the range of ports that LBD will be configured on portlist Enter a list of ports all To set all ports in the system you may use the all parameter state Specify whether the LBD funct...

Page 587: ...xample To enable the LBD function globally DGS 3120 24TC admin enable loopdetect Command enable loopdetect Success DGS 3120 24TC admin 54 4 disable loopdetect Description This command is used to disab...

Page 588: ...t show loopdetect Parameters None Restrictions Only Administrator and Operator level users can issue this command Example To show the LBD global settings DGS 3120 24TC admin show loopdetect Command sh...

Page 589: ...loopdetect ports 1 9 Port Loopdetect State Loop Status 1 Enabled Normal 2 Enabled Normal 3 Enabled Normal 4 Enabled Normal 5 Enabled Loop 6 Enabled Normal 7 Enabled Loop 8 Enabled Normal 9 Enabled Nor...

Page 590: ...g loopdetect log Description This command is used to configure the log state for LBD The default value is enabled Format config loopdetect log state enable disable Parameters state Specify the state o...

Page 591: ...rface name used for this configuration here This name can be up to 12 characters long network_address Optional Enter the IPv4 network address of the loopback interface here It specifies a host address...

Page 592: ...tate of the loopback interface enable Specify that the loopback interface state will be enabled disable Specify that the loopback interface state will be disabled Restrictions Only Administrator Opera...

Page 593: ...ipif Description This command is used to display the information of the loopback interface Format show loopback ipif ipif_name 12 Parameters ipif_name 12 Optional Enter the IP interface name used for...

Page 594: ...6 1 enable mac_notification Description This command is used to enable global MAC address table notification on the Switch Format enable mac_notification Parameters None Restrictions Only Administrato...

Page 595: ...historysize int 1 500 Parameters interval Optional The time in seconds between notifications sec 1 2147483647 Enter the interval time here This value must be between 1 and 2147483647 seconds historys...

Page 596: ...his configuration enable Enable the port s MAC address table notification disable Disable the port s MAC address table notification Restrictions Only Administrator Operator and Power User level users...

Page 597: ...ac Notification Settings State Enabled Interval 1 History Size 500 DGS 3120 24TC admin 56 6 show mac_notification ports Description This command is used to display the port s Mac address table notific...

Page 598: ...593 DGS 3120 24TC admin show mac_notification ports Command show mac_notification ports Port MAC Address Table Notification State 1 1 Disabled 1 2 Disabled 1 3 Disabled 1 4 Disabled 1 5 Disabled 1 6...

Page 599: ...ports all portlist mac_addr macaddr create mac_based_access_control_local mac macaddr vlan vlan_name 32 vlanid vlanid 1 4094 config mac_based_access_control_local mac macaddr vlan vlan_name 32 vlanid...

Page 600: ...Access Control Format disable mac_based_access_control Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To disable the MAC based Acces...

Page 601: ...based_access_control password_type Description This command is used to chose the password type used for authentication via the RADIUS server Format config mac_based_access_control password_type manual...

Page 602: ...ntrol method local Command config mac_based_access_control method local Success DGS 3120 24TC admin 57 6 config mac_based_access_control guest_vlan Description This command is used to assign a specifi...

Page 603: ...based Access Control function is enabled for a port and the port is a MAC based Access Control guest VLAN member the port s will be removed from the original VLAN s member ports and added to MAC based...

Page 604: ...o infinite it means that authorized clients will not be aged out automatically min 1 1440 Enter the aging time value here This value must be between 1 and 1440 minutes block_time Optional If a host fa...

Page 605: ...t_vlan Specify MAC based Access Control guest VLAN by name it must be a static 1Q VLAN vlan_name 32 Enter the VLAN name here This name can be up to 32 characters long guest_vlanid Specify MAC based Ac...

Page 606: ..._based_access_control guest_vlan default Command delete mac_based_access_control guest_vlan default Success DGS 3120 24TC admin 57 10 clear mac_based_access_control auth_state Description This command...

Page 607: ...Control local database entry that will be used for authentication This command can also specify the VLAN that an authorized host will be assigned to Format create mac_based_access_control_local mac m...

Page 608: ...ocal mac macaddr vlan vlan_name 32 vlanid vlanid 1 4094 clear_vlan Parameters mac Specify the authenticated host s MAC address macaddr Enter the MAC address used here vlan Specify the target VLAN by V...

Page 609: ...dress macaddr Enter the MAC address used here vlan Delete local database entries by specific target VLAN name vlan_name 32 Enter the VLAN name here This name can be up to 32 characters long vlanid Del...

Page 610: ...enable disable local enable disable 1 Parameters radius Optional If specified to enable the authorized attributes for example VLAN 802 1p default priority and ACL assigned by the RADUIS server will be...

Page 611: ...this configuration here If no parameter is specified the global MAC based Access Control settings will be displayed Restrictions None Examples To show the MAC based Access Control port configuration f...

Page 612: ...w mac_based_access_control_local mac macaddr vlan vlan_name 32 vlanid vlanid 1 4094 Parameters mac Optional Displays MAC based Access Control local database entries for a specific MAC address macaddr...

Page 613: ...rol auth_state ports portlist Parameters ports Display authentication status by specific port portlist Optional Enter the list of port used for this configuration here If not specified port s it will...

Page 614: ...ctions Only Administrator Operator and Power User level users can issue this command Example To configure the maximum number of users of the MAC based Access Control system supports to 128 DGS 3120 24...

Page 615: ...ble or disable generating of MAC based Access Control logs Format config mac_based_access_control log state enable disable Parameters enable Enable log for MAC based Access Control The log of MAC base...

Page 616: ...tion of the maximum entries supported for the static MAC based entry Format create mac_based_vlan mac_address macaddr vlan vlan_name 32 vlanid vlanid 1 4094 priority value 0 7 Parameters mac_address S...

Page 617: ...C address vlan_name 32 Enter the VLAN name here This name can be up to 32 characters long vlanid Optional Specify the VLAN by VLAN ID vlanid 1 4094 Enter the VLAN ID here This value must be between 1...

Page 618: ...ptional Specify the VLAN by VLAN ID vlanid 1 4094 Enter the VLAN ID here This value must be between 1 and 4094 Restrictions None Example In the following example MAC address 00 80 c2 33 c3 45 is assig...

Page 619: ...is key must be between 1 and 255 password 16 Enter an alphanumeric string of between 1 and 16 case sensitive characters used to generate the Message Digest which is in turn used to authenticate OSPF p...

Page 620: ...characters used to generate the Message Digest which is in turn used to authenticate OSPF packets within the OSPF routing domain Restrictions Only Administrator and Operator level users can issue thi...

Page 621: ...key table Format show md5 key key_id 1 255 Parameters key Optional Specify that the MD5 key will be displayed key_id 1 255 Enter the MD5 key used here This key must be between 1 and 255 If no paramete...

Page 622: ...the source port If the target port is operating at a lower speed the source port will be forced to drop its operating speed to match that of the target port Format config mirror port port add delete...

Page 623: ...ed to enable mirror function without having to modify the mirror session configuration Format enable mirror Parameters None Restrictions Only Administrator and Operator level users can issue this comm...

Page 624: ...TC admin disable mirror Command disable mirror Success DGS 3120 24TC admin 60 4 show mirror Description This command is used to display the current mirror function state and mirror session configurati...

Page 625: ...lue 1 4 Enter a mirro group identify value Restrictions Only Administrator and Operator level users can issue this command Example To create mirror group 3 DGS 3120 24TC admin create mirror group_id 3...

Page 626: ...e mirror group source ports will be mirrored to the mirror group target port both Both the received and sent packets on the mirror group source ports will be mirrored to the mirror group target port s...

Page 627: ...et Switch CLI Reference Guide 622 Restrictions Only Administrator and Operator level users can issue this command Example To delete mirror group 3 DGS 3120 24TC admin delete mirror group_id 3 Command...

Page 628: ...query_interval Specify the time in seconds between general query transmissions sec 1 31744 Enter the query interval time This value must be between 1 and 31744 seconds The default value is 125 max_re...

Page 629: ...interface System DGS 3120 24TC admin config mld ipif System version 1 state enable Command config mld ipif System version 1 state enable Success DGS 3120 24TC admin 61 2 show mld Description This com...

Page 630: ...Description This command is used to display the MLD group member table Format show mld group ipif ipif_name 12 group ipv6addr Parameters ipif Optional Specify the IP interface name ipif_name 12 Enter...

Page 631: ...source_ip ipv6addr unsolicited_report_interval sec 0 25 1 show mld_proxy group 62 1 enable mld_proxy Description This command is used to enable the MLD proxy on the switch Format enable mld_proxy Para...

Page 632: ...nterface must be an MLD Snooping enabled VLAN Format config mld_proxy downstream_if add delete vlan vlan_name 32 vlanid vidlist Parameters add Specify to add a downstream interface delete Specify to d...

Page 633: ...erval sec 0 25 1 Parameters vlan Specify the VLAN for the upstream interface vlan_name 32 Specify a VLAN name between 1 and 32 characters vlanid Specify the VLAN ID for the upstream interface vlanid 1...

Page 634: ...mation The display status item means group entry is determined by whether or not the chip has been inserted Format show mld_proxy group Parameters group Optional Specify the group information Restrict...

Page 635: ...Guide 630 DGS 3120 24TC admin show mld_proxy group Command show mld_proxy group Source NULL Group FF1E 0202 Downstream VLAN 4 Member Ports 3 6 Status Active Source FF80 200 Group FF1E 0202 Downstream...

Page 636: ...mld_snooping group vlan vlan_name 32 vlanid vlanid_list ports portlist ipv6addr data_driven show mld_snooping forwarding vlan vlan_name 32 vlanid vlanid_list show mld_snooping mrouter_ports vlan vlan...

Page 637: ...pecify that MLD snooping will ignore link layer topology changes caused by Spanning Tree operation General queries won t be sent on the same domain of link layer topology changes process Specify that...

Page 638: ...is used in calculating the following MLD message intervals value 1 7 Enter the robustness variable value here This value must be between 1 and 7 Group listener interval Amount of time that must pass...

Page 639: ...iption This command is used to designate a range of ports as being connected to multicast enabled routers This will ensure that all packets with such a router as its destination will reach the multica...

Page 640: ...VLAN name can be up to 32 characters long vlanid Specify the ID of the VLAN on which the router port resides vlanid_list Enter the VLAN ID list here add Specify to add the router ports delete Specify...

Page 641: ...rs of this multicast group Restrictions Only Administrator Operator and Power User level users can issue this command Example To enable MLD snooping on the Switch DGS 3120 24TC admin enable mld_snoopi...

Page 642: ...Switch Format show mld_snooping vlan vlan_name 32 vlanid vlanid_list Parameters vlan Optional Specify the name of the VLAN for which you want to view the IGMP snooping configuration vlan_name 32 Enter...

Page 643: ...ooping group vlan vlan_name 32 vlanid vlanid_list ports portlist ipv6addr data_driven Parameters vlan Optional Specify the name of the VLAN for which you want to view MLD snooping group information If...

Page 644: ...mber port list is empty The multicast packets will be forwarded to the router ports If the router port list is empty the packet will be dropped DGS 3120 24TC admin show mld_snooping group Command show...

Page 645: ...ll be forwarded to The packet comes from the source VLAN They will be forwarded to the forwarding VLAN The MLD snooping further restricts the forwarding ports Format show mld_snooping forwarding vlan...

Page 646: ...all static dynamic forbidden Parameters vlan Specify the name of the VLAN on which the router port resides vlan_name 32 Enter the VLAN name here The VLAN name can be up to 32 characters long vlanid Sp...

Page 647: ...destined to the multicast group to the member ports For a layer 3 device the device is also responsible to route the packets destined for this specific group to static member ports The static member p...

Page 648: ...6addr Specify the multicast group IP address Restrictions Only Administrator Operator and Power User level users can issue this command Example To delete an MLD snooping static group for VLAN named de...

Page 649: ...ser level users can issue this command Example To unset port range 9 10 from MLD snooping static member ports for group FF1E 1 on default VLAN DGS 3120 24TC admin config mld_snooping static_group vlan...

Page 650: ...by the aged timer When the data driven learning is enabled and the data driven table is not full the multicast filtering mode for all ports is ignored That is the multicast packets will be forwarded t...

Page 651: ...min config mld_snooping data_driven_learning vlan_name default state enable Command config mld_snooping data_driven_learning vlan_name default state enable Success DGS 3120 24TC admin 63 16 config mld...

Page 652: ...all Specify all VLANs to which IGMP snooping groups will be deleted vlan_name Specify the VLAN name vlan_name 32 Enter the VLAN name here vlanid Specify the VLAN ID vlanid_list Enter the VLAN ID list...

Page 653: ...of port here Restrictions None Example To show MLD snooping statistics counters DGS 3120 24TC admin show mld_snooping statistics counter vlanid 1 Command show mld_snooping statistics counter vlanid 1...

Page 654: ...r Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To clear MLD snooping statistics counter DGS 3120 24TC admin clear mld_snooping sta...

Page 655: ...second The packets that exceed the limited rate will be dropped The default setting is no_limit Restrictions Only Administrator Operator and Power User level users can issue this command Example To c...

Page 656: ...ch CLI Reference Guide 651 DGS 3120 24TC admin show mld_snooping rate_limit ports 1 1 1 5 Command show mld_snooping rate_limit ports 1 1 1 5 Port Rate Limit pkt sec 1 1 100 1 2 No Limit 1 3 No Limit 1...

Page 657: ...er port STP debug level on the specified ports Format debug stp config ports portlist all event bpdu state_machine all state disable brief detail Parameters portlist Specify the STP port range to debu...

Page 658: ...tor level users can issue this command Example To show STP debug information DGS 3120 24TC admin debug stp show information Command debug stp show information Warning only support local device Spannin...

Page 659: ...o display the STP debug level on specified ports Format debug stp show flag ports portlist Parameters ports Optional Specify the STP ports to display portlist Enter the list of port used for this conf...

Page 660: ...f Brief Brief 1 19 Brief Brief Brief 1 20 Brief Brief Brief 1 21 Brief Brief Brief 1 22 Brief Brief Brief 1 23 Brief Brief Brief 1 24 Brief Brief Brief DGS 3120 24TC admin 64 4 debug stp show counter...

Page 661: ...ed BPDU 0 Global STP Disabled 0 Port STP Disabled 0 Invalid packet Format 0 Invalid Protocol 0 Configuration BPDU Length 0 TCN BPDU Length 0 RST BPDU Length 0 Invalid Type 0 Invalid Timers 0 DGS 3120...

Page 662: ...e enable disable Parameters state Specify the STP debug state enable Enable the STP debug state disable Disable the STP debug state Restrictions Only Administrator level users can issue this command E...

Page 663: ...w root traps enable Enable sending new root traps new_root Specify the state of sending topology change traps The default state is enable enable Enable sending topology change traps disable Enable sen...

Page 664: ...lace 1 show max_mcast_group ports portlist vlanid vlanid_list ipv4 ipv6 show limited_multicast_addr ports portlist vlanid vlanid_list ipv4 ipv6 config cpu_filter l3_control_pkt portlist dvmrp pim igmp...

Page 665: ...profile name can be up to 32 characters long profile_name Provides a meaningful description for the profile name 32 Enter the profile name The profile name can be up to 32 characters long add Specify...

Page 666: ...ther specify a single IPv6 multicast IP address or a range of IPv6 multicast addresses connected by Restrictions Only Administrator Operator and Power User level users can issue this command Example T...

Page 667: ...D DGS 3120 24TC admin delete mcast_filter_profile profile_name MOD Command delete mcast_filter_profile profile_name MOD Success DGS 3120 24TC admin 65 5 show mcast_filter_profile Description This comm...

Page 668: ...ofile_id value 1 24 profile_name name 32 delete profile_id value 1 24 profile_name name 32 all access permit deny 1 Parameters ports Specify the range of ports to configure the multicast address filte...

Page 669: ...the joined groups for a port or a VLAN have reached the maximum number the newly learned group will be dropped if the action is specified as drop The newly learned group will replace the eldest group...

Page 670: ...um number of multicast groups that a port can join If the IPv4 or IPv6 option is not specified IPv4 is implied Format show max_mcast_group ports portlist vlanid vlanid_list ipv4 ipv6 Parameters ports...

Page 671: ...igured on a port it limits the multicast groups operated by the IGMP or MLD snooping function and layer 3 functions When the function is configured on a VLAN it limits the multicast groups operated by...

Page 672: ...es 2 MOD 225 1 1 1 225 1 1 10 Port 1 3 Access Permit Profile ID Name Multicast Addresses 2 MOD 225 1 1 1 225 1 1 10 DGS 3120 24TC admin To show the limited multicast settings configured on VLAN 1 DGS...

Page 673: ...filtering function disable Disable the filtering function Restrictions Only Administrator Operator and Power User level users can issue this command Example To filter the DVMRP control packets on port...

Page 674: ...Switch CLI Reference Guide 669 DGS 3120 24TC admin show cpu_filter l3_control_pkt ports 1 1 1 2 Command show cpu_filter l3_control_pkt ports 1 1 1 2 Port IGMP Query DVMRP PIM 1 1 Disabled Enabled Dis...

Page 675: ...ss_list delete igmp_snooping mld_snooping multicast_vlan_group_profile profile_name profile_name 1 32 all show igmp_snooping mld_snooping multicast_vlan_group_profile profile_name 1 32 config igmp_sno...

Page 676: ...will be changed by the Switch based on the remap priority This flag will only take effect when the remap priority is set Restrictions Only Administrator Operator and Power User level users can issue...

Page 677: ...or disabled enable Specify to enable the multicast VLAN for a chosen VLAN disable Specify to disable the multicast VLAN for a chosen VLAN replace_source_ip Before forwarding the report packet sent by...

Page 678: ...list of port to be configured here tag_member_port Specify that the port or range of ports will become tagged members of the multicast VLAN portlist Enter the list of port to be configured here sourc...

Page 679: ...DGS 3120 24TC admin 66 4 create igmp_snooping mld_snooping multicast_vlan_group_profile Description This command is used to create an IGMP or MLD snooping multicast group profile on the Switch Format...

Page 680: ...le The mcast_address_list can be a continuous single multicast address such as 225 1 1 1 225 1 1 3 225 1 1 8 a multicast address range such as 225 1 1 1 225 2 2 2 or both of types such as 225 1 1 1 22...

Page 681: ...FF1E 1 FF1E 10 FF1E 20 delete Delete multicast address list to or from this multicast VLAN profile The mcast_v6address_list can be a continuous single multicast addresses such as FF1E 1 a multicast ad...

Page 682: ...the name MOD DGS 3120 24TC admin delete igmp_snooping multicast_vlan_group_profile profile_name MOD Command delete igmp_snooping multicast_vlan_group_profile profile_name MOD Success DGS 3120 24TC adm...

Page 683: ...is learned on only the multicast VLAN that this port is a member of Case 2 The join packet is learned with the multicast VLAN that contains the destination multicast group If the destination multicas...

Page 684: ...gmp_snooping mld_snooping multicast_vlan_group Description This command is used to show an IGMP snooping or MLD snooping multicast VLAN group Format show igmp_snooping mld_snooping multicast_vlan_grou...

Page 685: ...tor Operator and Power User level users can issue this command Example To delete an MLD snooping multicast VLAN called v1 DGS 3120 24TC admin delete mld_snooping multicat_vlan v1 Command delete mld_sn...

Page 686: ...d disable igmp_snooping is used to disable the ordinary IGMP snooping function while the command disable mld_snooping is used to disable the ordinary MLD snooping function By default the multicast VLA...

Page 687: ...cify that the IGMP snooping multicast VLAN function will be configured mld_snooping Specify that the MLD snooping multicast VLAN function will be configured multicast_vlan forward_unmatched Specify to...

Page 688: ...nter the VLAN name here The VLAN name can be up to 32 characters long Restrictions None Example To display all IGMP snooping multicast VLANs DGS 3120 24TC admin show igmp_snooping multicast_vlan Comma...

Page 689: ...nicast_fdb Description This command is used to create the NLB unicast FDB entry Format create nlb unicast_fdb macaddr Parameters macaddr Specify the MAC address of the NLB unicast FDB entry to be crea...

Page 690: ...cast FDB entry for the product that support the VLAN information on the unicast forwarding DGS 3120 24TC admin config nlb unicast_fdb 02 BF 01 01 01 01 add 1 1 1 5 Command config nlb unicast_fdb 02 BF...

Page 691: ...garding of the mode this destination Mac is the named the shared MAC The server uses its own MAC address rather than the shared MAC as the source MAC address of the reply packet The NLB multicast FDB...

Page 692: ...igured vlanid Specify the VLAN by the VLAN ID vlanid 1 4094 Enter the VLAN ID here macaddr Specify the Mac address of the NLB multicast FDB entry to be configured add Specify a list of forwarding port...

Page 693: ...the MAC address of the NLB multicast FDB entry to be deleted Restrictions Only Administrator Operator and Power User level users can issue this command Example To delete NLB multicast FDB entry DGS 3...

Page 694: ...it Ethernet Switch CLI Reference Guide 689 DGS 3120 24TC admin show nlb fdb Command show nlb fdb MAC Address VLAN ID Egress Ports 03 bf 01 01 01 01 100 1 1 1 5 1 24 2 24 03 bf 01 01 01 01 1 1 1 1 5 1...

Page 695: ...s show utilization dram unit unit_id show utilization flash unit unit_id clear counters ports portlist 68 1 show packet ports Description This command is used to display statistics about the packets s...

Page 696: ...1518 0 0 Unicast RX 0 0 Multicast RX 0 0 Broadcast RX 0 0 Frame Type Total Total sec RX Bytes 0 0 RX Frames 0 0 TX Bytes 0 0 TX Frames 0 0 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh...

Page 697: ...gment 0 Excessive Collision 0 Jabber 0 Single Collision 0 Drop Pkts 0 Collision 0 Symbol Error 0 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh 68 3 show utilization Description This co...

Page 698: ...1 10 0 0 0 1 11 0 0 0 1 12 0 0 0 1 13 0 0 0 1 14 0 0 0 1 15 0 0 0 1 16 0 0 0 1 17 0 0 0 1 18 0 0 0 1 19 0 0 0 1 20 0 0 0 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh To display the C...

Page 699: ...on dram Command show utilization dram Unit 1 DRAM utilization Total DRAM 131072 KB Used DRAM 128128 KB Utilization 97 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh 68 5 show utilizatio...

Page 700: ...onfigured The port list is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then highest switch number and the highest port number of the...

Page 701: ...AM discovery If a port s is active it initiates the discovery Otherwise it reacts to the discovery received from peer Disabling a port s OAM will cause the port to send out a dying gasp event to peers...

Page 702: ...f threshold is 1 symbol error range 0 4294967295 Specify the range from 0 to 4294967295 window The range is 1000 to 60000 ms The default value is 1000ms millisecond 1000 60000 The range is 1000 to 600...

Page 703: ...ommand ignore Specify to ignore the received Ethernet OAM remote loopback command The default method is ignore Restrictions Only Administrator and Operator level users can issue this command Example T...

Page 704: ...figure the error frame period threshold to10 and period to 1000000 ms for port 1 DGS 3120 24TC admin config ethernet_oam ports 1 link_monitor error_frame_period threshold 10 window 1000000 notify_stat...

Page 705: ...The remote OAM entity rejects the local device Operational The local OAM entity learns that both it and the remote OAM entity have accepted the peering NonOperHalfDuplex Since Ethernet OAM functions a...

Page 706: ...AM event log and syslog Format show ethernet_oam ports portlist status configuration statistics event_log index value_list Parameters portlist Optional Specify the range of ports to display status Spe...

Page 707: ...nse OAMPDU TX 0 Variable Response OAMPDU RX 0 Organization Specific OAMPDUs TX 0 Organization Specific OAMPDUs RX 0 Unsupported OAMPDU TX 0 Unsupported OAMPDU RX 0 Frames Lost Due To OAM 0 DGS 3120 24...

Page 708: ...GS 3120 24TC admin clear ethernet_oam ports 1 statistics Command clear ethernet_oam ports 1 statistics Success DGS 3120 24TC admin To clear port 1 OAM events DGS 3120 24TC admin clear ethernet_oam por...

Page 709: ...e ospf area area_id show ospf area area_id create ospf host_route ipaddr area area_id metric value 1 65535 config ospf host_route ipaddr area area_id metric value 1 65535 1 delete ospf host_route ipad...

Page 710: ...at router down An interval between 1 and 65535 seconds can be specified The Dead Interval must be evenly divisable by the Hello Interval sec 1 65535 Enter the dead interval value here This value must...

Page 711: ...rk address format is IP address prefix length lsdb_type Specify the Link State Database LSDB type of address aggregation summary Specify the LSDB type as summary advertise Optional Allows for the adve...

Page 712: ...the summary LSAs enable Specify that the advertisement trigger will be enabled disable Specify that the advertisement trigger will be disabled nssa_ext Specify the LSDB type as a Not So Stub Area Ext...

Page 713: ...nssa_ext Specify the NSSA EXT type Restrictions Only Administrator Operator and Power User level users can issue this command Example To delete an OSPF area aggregation entry DGS 3120 24TC admin dele...

Page 714: ...d throughout the entire AS However OSPF allows certain areas to be configured as stub areas AS external advertisements are not flooded into throughout stub areas routing to AS external destinations in...

Page 715: ...are not flooded into throughout stub areas routing to AS external destinations in these areas is based on a per area default only This reduces the topological database size and therefore the memory r...

Page 716: ...sed to delete an OSPF area Format delete ospf area area_id Parameters area_id Enter the OSPF area ID used here Restrictions Only Administrator Operator and Power User level users can issue this comman...

Page 717: ...on This command is used to create an OSPF host route Format create ospf host_route ipaddr area area_id metric value 1 65535 Parameters ipaddr Enter the host s IP address used here area Optional Specif...

Page 718: ...er in the form of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain area_id Enter the area ID value here metric Optional Specify a metric that will be advertised...

Page 719: ...xample To delete an OSPF host route DGS 3120 24TC admin delete ospf host_route 10 48 74 122 Command delete ospf host_route 10 48 74 122 Success DGS 3120 24TC admin 70 13 show ospf host_route Descripti...

Page 720: ...router ID for the Switch Each Switch that is configured to run OSPF must have a unique router ID Format config ospf router_id ipaddr Parameters ipaddr Enter the router s IP address here Restrictions O...

Page 721: ...ication of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specified Th...

Page 722: ...specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specif...

Page 723: ...min delete ospf virtual_link 10 1 1 1 20 1 1 1 Command delete ospf virtual_link 10 1 1 1 20 1 1 1 Success DGS 3120 24TC admin 70 18 show ospf virtual_link Description This command is used to display t...

Page 724: ...Status 10 1 1 1 20 1 1 1 30 60 None Down Total Entries 1 DGS 3120 24TC admin 70 19 enable ospf Description This command is used to enable OSPF on the Switch Format enable ospf Parameters None Restrict...

Page 725: ...Success DGS 3120 24TC admin 70 21 show ospf Description This command is used to display the current OSPF information on the Switch Format show ospf ipif ipif_name 12 all Parameters ipif Optional Speci...

Page 726: ...vertise_router ipaddr type rtrlink netlink summary assummary asextlink nssa_ext stub Parameters area Optional Specify a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identif...

Page 727: ...50 48 75 73 50 48 75 73 0x80000001 1 0 0 0 Summary 50 48 75 73 40 0 0 0 8 1 0x80000001 1 0 0 0 Summary 50 48 75 73 50 0 0 0 8 1 0x80000001 0 0 0 0 ASExtLink 50 48 75 73 1 2 0 0 16 20 0x80000001 Total...

Page 728: ...in the form of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain neighbor_id Optional Specify the OSPF router ID for the remote area This is a 32 bit number in t...

Page 729: ...is the default option mettype Optional Specify the type of LSA that contains the default external route imported into OSPF 1 Specify that this default external route will be calculated using the metri...

Page 730: ...fix inter_area_router asextlink link_lsa intra_area_prefix show ospfv3 neighbor neighbor_id ipif ipif_name 12 show ospfv3 virtual_neighbor area_id neighbor_id create ospfv3 virtual_link area_id neighb...

Page 731: ...d Example To configure OSPFv3 router ID DGS 3120 24TC admin config ospfv3 router_id 1 1 1 1 Command config ospfv3 router_id 1 1 1 1 Success DGS 3120 24TC admin 71 2 enable ospfv3 Description This comm...

Page 732: ...OSPFv3 interface all Specify to configure all OSPFv3 interfaces area Optional Specify the OSPFv3 area ID It is a 32 bit number in the form of an IPv4 address that uniquely identifies the OSPFv3 area i...

Page 733: ...Passive interface does not advertise to any other routers except those within its OSPFv3 intranet When this field is disabled it denotes an active interface Its default setting is Disabled enable Spec...

Page 734: ...0 0 Normal None None Total Entries 1 Virtual Interface Configuration CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All 71 6 create ospfv3 area Description This command is used to create an O...

Page 735: ...is used to configure an OSPFv3 area The backbone area 0 0 0 0 can not be configured to be stub area Format config ospfv3 area area_id type normal stub stub_summary enable disable metric value 0 65535...

Page 736: ...eted Format delete ospfv3 area area_id Parameters area_id Enter the OSPFv3 area ID It is a 32 bit number in the form of an IPv4 address that uniquely identifies the OSPFv3 area in the OSPFv3 domain Re...

Page 737: ...ommand is used to create an OSPFv3 area aggregation Format create ospfv3 aggregation area_id ipv6networkaddr advertise enable disable Parameters area_id Enter the OSPFv3 area ID where the aggregation...

Page 738: ...ion advertise Specify whether to use this aggregation to aggregate the intra area routes when it advertises these routes to another area enable OSPFv3 ABR Area Border Router will use this aggregation...

Page 739: ...Power User level users can issue this command Example To delete an OSPFv3 area aggregation DGS 3120 24TC admin delete ospfv3 aggregation 2 2 2 2 2000 16 Command delete ospfv3 aggregation 2 2 2 2 2000...

Page 740: ...xtlink link_lsa intra_area_prefix Parameters area Optional Specify to only display the LSAs that belong to this area area_id Enter the area ID type Optional Specify to only display the LSAs of the spe...

Page 741: ...a 0 0 0 0 Link State ID ADV Router Age Seq Ref LSA Type 0 0 0 1 2 2 2 2 684 0x80000004 0x2001 Total Entries 3 DGS 3120 24TC admin 71 15 show ospfv3 neighbor Description This command is used to display...

Page 742: ...l neighbor information Format show ospfv3 virtual_neighbor area_id neighbor_id Parameters area_id Optional Specify the transit area where the virtual neighbor is built neighbor_id Optional Specify the...

Page 743: ...outer before the selected area declares that the router is down The dead interval must be evenly divisible by the hello interval sec 1 65535 Enter the interval between 1 and 65535 seconds The default...

Page 744: ...ID on the virtual link Support for multiple instances on a link is accomplished through an instance ID contained in the OSPFv3 packet header If the instance ID configured on the interface and that of...

Page 745: ...n This command is used to display OSPFv3 virtual link configurations Format show ospfv3 virtual_link area_id neighbor_id Parameters area_id Optional Specify a 32 bit number in the form of an IPv4 addr...

Page 746: ...2 metric value 1 16777214 Parameters local Redistribute local routes into OSPFv3 static Redistribute static routes into OSPFv3 ripng Redistribute RIPng routes into OSPFv3 mettype Optional Allow the s...

Page 747: ...tes into OSPFv3 mettype Optional Allow the selection of one of two methods for calculating the metric value 1 1 calculates the metric for other routing protocols to OSPFv3 by adding the destination s...

Page 748: ...3 src local static ripng Parameters local Specify not to redistribute local routes into OSPFv3 static Specify not to redistribute static routes into OSPFv3 ripng Specify not to redistribute RIPng rout...

Page 749: ...overy mode NOTE This command does not take effect until being saved Format enable password_recovery Parameters None Restrictions Only Administrator level users can issue this command Example To enable...

Page 750: ...e password recovery state is enabled the user can reboot the Switch and enter the Password Recovery mode Otherwise the user will not be able to enter the special recovery mode NOTE Only the NV RAM con...

Page 751: ...bit Ethernet Switch CLI Reference Guide 746 Example To display the password recovery state DGS 3120 24TC admin show password_recovery Command show password_recovery Running Configuration Enabled NV RA...

Page 752: ...stem Within fan s status display for example there are three fans on the left of the Switch if three fans is working normally there will display OK in the Left Fan field If some fans work failed such...

Page 753: ...witch CLI Reference Guide 748 73 2 show environment Description This command is used to display current status of power s and fan s on the system Format show environment Parameters None Restrictions N...

Page 754: ...shold Celsius 40 Fan Low Temperature Threshold Celsius 35 Unit 3 Internal Power Active External Power Fail Right Fan 1 Speed Low 3000 RPM Right Fan 2 Speed Low 3000 RPM Current Temperature Celsius 37...

Page 755: ...figure the trap and log state for temperature warning event Format config temperature trap log state enable disable Parameters trap state Specify the trap state for the warning temperature event enabl...

Page 756: ...el users can issue this command Example To configure the warning fan traps state DGS 3120 24TC admin config fan trap state enable Command config fan trap state enable Success DGS 3120 24TC admin 73 6...

Page 757: ...nite sec 1 3600 Parameters timeout Optional Specify the timeout value after which the port LEDs will return to normal infinite Specify that the port LEDs will stay on until the disable light command w...

Page 758: ...Reference Guide 753 Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To return all the port LEDs to the normal state DGS 3120 24TC adm...

Page 759: ...addr Parameters ipaddr Specify the IP address of the host domain_name 255 Enter the domain name of the host times Optional The number of individual ICMP echo messages to be sent A value of 0 will send...

Page 760: ...1 99 source_ip ipv6addr Parameters ipv6addr Enter the IPv6 address here domain_name 255 Enter the domain name of the host times Optional The number of individual ICMP echo messages to be sent A value...

Page 761: ...0 24TC admin ping6 3000 1 times 4 Command ping6 3000 1 times 4 Reply from 3000 1 bytes 100 time 10ms Reply from 3000 1 bytes 100 time 10ms Reply from 3000 1 bytes 100 time 10ms Reply from 3000 1 bytes...

Page 762: ...n This command is used to create a policy route and define the route s name Format create policy_route name policyroute_name 32 Parameters policyroute_name 32 The policy route name The maximum length...

Page 763: ...display an error message k If the ACL rule action is drop these packets will not forward and the policy route will not be implemented l When a packet passes from the policy route its TTL will decreas...

Page 764: ...licy_route name danilo acl profile_id 1 access_id 1 nexthop 20 1 1 100 state enable Success DGS 3120 24TC admin 75 4 show policy_route Description This command is used to display the Switch s current...

Page 765: ...arning_addr Description This command is used to set the maximum number of port security entries that can be authorized system wide There are four levels of limitations on the learned entry number for...

Page 766: ...s that no user can be authorized by the port security function on this port If the setting is smaller than the number of current learned entries on the port the command will be rejected The default va...

Page 767: ...cription This command is used to set the maximum number of port security entries that can be learned on a specific VLAN There are four levels that limit the number of learned entries the entire system...

Page 768: ...entry vlan vlan_name 32 vlanid vlanid 1 4094 mac_address macaddr Parameters vlan Specify the VLAN by VLAN name vlan_name 32 Enter the VLAN name here This name can be up to 32 characters long vlanid Sp...

Page 769: ...lanid Optional Specify a list of VLANs by VLAN ID vidlist Enter the VLAN ID list here Restrictions Only Administrator Operator and Power User level users can issue this command Example To clear the po...

Page 770: ...otal Entries 1 DGS 3120 24TC admin 76 7 show port_security Description This command is used to display the port security related information including state maximum learned addresses and lock address...

Page 771: ...sending of port security traps When the port security trap is enabled if there is a new MAC that violates the pre defined port security configuration a trap will be sent out with the information about...

Page 772: ...configuration the MAC port and other relevant information will be logged otherwise no log will be generated Format config port_security log state enable disable Parameters enable Enable port security...

Page 773: ...its all supported PoE units in the system will be configured unitlist Enter the list of units that will be configured here all Specify that all the units will be configured power_limit Optional Config...

Page 774: ...r_limit 250 power_disconnect_method deny_low_priority_port Success DGS 3120 24PC admin 77 2 config poe ports Description This command is used to configure the PoE port settings Based on 802 3af there...

Page 775: ...me range priority Optional Port priority determines the priority the system attempts to supply the power to port There are three levels of priority that can be selected critical high and low When mult...

Page 776: ...define 1000 Command config poe ports 1 5 state enable priority critical power_limit user_define 1000 Success DGS 3120 24PC admin 77 3 show poe system Description This command is used to display the se...

Page 777: ...egacy PD Disabled If Power Disconnection Method is set to deny next port then the system can not utilize out of its maximum power capacity The maximum unused watt is 19W DGS 3120 24PC admin 77 4 show...

Page 778: ...ined 0 0 0 0 OFF Interim state during line detection 1 2 Enabled Low 15400 User defined 0 0 0 0 OFF Interim state during line detection 1 3 Enabled Low 15400 User defined 0 0 0 0 OFF Interim state dur...

Page 779: ...continuously monitor energy on the cable The moment energy is detected the port will turn on fully as to the IEEE specification s requirements The power saving function is performed while no link is d...

Page 780: ...uccess DGS 3120 24TC admin 78 2 config power_saving hibernation Description This command is used to add or delete the power saving schedule on system hibernation When the system enters hibernation mod...

Page 781: ...time_range range_name 32 clear_time_range Parameters add Specify to add a time range delete Specify to delete a time range time_range Specify the name of the time range range_name32 Enter a name for...

Page 782: ...estrictions Only Administrator and Operator level users can issue this command Example To add a time range named range_1 on port 1 DGS 3120 24TC admin config power_saving port 1 1 add time_range range...

Page 783: ...the power saving function setting DGS 3120 24TC admin show power_saving Command show power_saving Link Detection State Enabled Length Detection State Disabled Power Saving Configuration On System Hib...

Page 784: ...DGS 3120 24TC admin config led state disable Command config led state disable Success DGS 3120 24TC admin 78 7 show led Description This command is used to display the setting of all port s LED admin...

Page 785: ...iscover and request packet if the tag is absent and remove the circuit ID tag from the received PPPoE offer and session confirmation packet The insert circuit ID contains the following information Cli...

Page 786: ...tting is enable enable Enable port s PPPoE circuit ID insertion function disable Disable port s PPPoE circuit ID insertion function circuit_id Configure the device ID part for encoding of the circuit...

Page 787: ...on ports Description This command is used to display Switch s port PPPoE Circuit ID insertion configuration Format show pppoe circuit_id_insertion ports portlist Parameters portlist Optional Specify a...

Page 788: ...xStack DGS 3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 783 DGS 3120 24TC admin...

Page 789: ...im last_hop_spt_switchover never immediately show pim ipmroute create pim static_rp group network_address rp ipaddr delete pim static_rp group network_address show pim static_rp show pim rpset create...

Page 790: ...l mode will be set to sparse dense mode dr_priority Specify the priority for DR Designated Router election The DR will forward multicast traffic from a unicast source to the appropriate RP Rendezvous...

Page 791: ...his command Example To enable PIM DGS 3120 24TC admin enable pim Command enable pim Success DGS 3120 24TC admin 80 3 disable pim Description This command is used to disable PIM on the switch Format di...

Page 792: ...This name can be up to 12 characters long ipaddress Optional Specify the IP address and netmask of the destination network_address Enter the destination IP address and netmask used here If no paramete...

Page 793: ...ode State System 10 90 90 90 8 10 90 90 90 30 60 DM Disabled Total Entries 1 DGS 3120 24TC admin 80 6 config pim cbsr Description This command is used to configure the BSR Bootstrap Router candidate f...

Page 794: ...the RP value 0 32 Enter the hash mask lenght value here This value must be between 0 and 32 The default value is 30 seconds bootstrap_period Specify the interval between originating Bootstrap message...

Page 795: ...set the time Candidate RP CRP advertisements are valid on the PIM SM enabled network If CRP advertisements are not received by the BSR within this time frame the CRP is removed from the list of candi...

Page 796: ...range into a C RP serve list for PIM SM Format create pim crp group network_address rp ipif_name 12 Parameters group Specify the multicast group address for this Switch to become a Candidate RP This a...

Page 797: ...is address must be a class ID address Restrictions Only Administrator Operator and Power User level users can issue this command Example To delete a multicast group range from the C RP server list DGS...

Page 798: ...to be never the last hop router will always receive the multicast data from the shared tree When the mode is set to immediately the last hop router will always receive the multicast data from the shor...

Page 799: ...w pim ipmroute PIM IP Multicast Route Table UA Upstream AssertTimer AM Assert Metric AMPref Assert MetricPref ARB Assert RPTBit Group Address Source Address UA AM AMPref ARB Flag Type Mode 225 0 0 0 1...

Page 800: ...IP address used here Restrictions Only Administrator Operator and Power User level users can issue this command Example To create a static RP DGS 3120 24TC admin create pim static_rp group 239 1 1 0 2...

Page 801: ...1 0 24 Success DGS 3120 24TC admin 80 16 show pim static_rp Description This command is used to list all the static RP settings Format show pim static_rp Parameters None Restrictions None Example To l...

Page 802: ...96 Dynamic 224 0 0 0 4 10 54 71 9 0 0 Static Total Entries 2 DGS 3120 24TC admin 80 18 create pim register_checksum_include_data rp_address Description This command is used to decide the checksum in r...

Page 803: ...GS 3120 24TC admin create pim register_checksum_include_data rp_address 24 1 2 3 Command create pim register_checksum_include_data rp_address 24 1 2 3 Success DGS 3120 24TC admin 80 19 delete pim regi...

Page 804: ...lude_data_rp_list Description This command is used to list all the RPs of the registered checksum including the data Format show pim register_checksum_include_data_rp_list Parameters None Restrictions...

Page 805: ...nabled disable Specify that the SSM service model will be disabled group_range Specify the group address range for the SSM service in IPv4 default The default indicates that the group address range is...

Page 806: ...anaged Gigabit Ethernet Switch CLI Reference Guide 801 Example To display PIM SSM state and group range DGS 3120 24TC admin show pim ssm Command show pim ssm SSM Service Model State Enabled SSM Group...

Page 807: ...dr ipif ipif_name 12 show pim6 mroute s_g rpt group ipv6addr source ipv6addr ipif ipif_name 12 create pim6 static_rp group ipv6networkaddr rp ipv6addr override_dynamic delete pim6 static_rp group ipv6...

Page 808: ...value of zero represents not to send PIM Join Prune message on this interface sec 0 18000 Enter the time between 0 and 18000 seconds The default value is 60 dr_priority Specify the Designated Router P...

Page 809: ...r the PIM6 protocol related parameters on all interfaces DGS 3120 24TC admin show pim6 Command show pim6 PIM6 Global State Disabled Last Hop SPT Switchover Never Register Probe Interval 5 sec Register...

Page 810: ...n 81 3 config pim6 cbsr Description This command is used to set the C BSR state the priority and the hash mask length of the candidate bootstrap router on an interface Format config pim6 cbsr ipif ipi...

Page 811: ...sh_masklen 126 Command config pim6 cbsr ipif System state enable priority 64 hash_masklen 126 Success DGS 3120 24TC admin 81 4 show pim6 cbsr Description This command is used to display the candidate...

Page 812: ...s 192 interval Specify the C RP advertisement interval in seconds sec 1 16383 Enter the interval between 1 and 16383 seconds The default value is 60 Restrictions Only Administrator Operator and Power...

Page 813: ...tion This command is used to delete a multicast group range from the C RP serve list Format delete pim6 crp group ipv6networkaddr Parameters ipv6networkaddr Specify the multicast group address range o...

Page 814: ...an IPv6 network DGS 3120 24TC admin enable pim6 Command enable pim6 Success DGS 3120 24TC admin 81 9 disable pim6 Description This command is used to disable the PIM global state for an IPv6 network...

Page 815: ...ely Specify to immediately switch to SPT The last hop router switches from shared tree to shortest path tree on the first multicast data arrived Restrictions Only Administrator Operator and Power User...

Page 816: ...and show pim6 neighbor ipif n20 Neighbor Info on Interface n20 Neighbor Address FE80 11FF 4CD8 Neighbor Up Time 00 00 50 Neighbor Expiry Time 00 01 50 Neighbor DR Priority Present True Neighbor DR Pri...

Page 817: ...Source 2001 1111 Upstream n2 Outgoing n10 Group FF13 102 Source 2001 3F6D Upstream n2 Outgoing n20 Group FF13 100 Source 2001 1111 rpt Upstream n1 RP Address 3FFE 10 10 153 Outgoing Total Entries 4 DG...

Page 818: ...2 RP Address 3FFE 10 10 153 Total Entries 3 DGS 3120 24TC admin 81 14 show pim6 mroute s_g Description This command is used to display the multicast routing information for S G or S G rpt entries gene...

Page 819: ...atic_rp group Description This command is used to create a static RP In general a static RP cannot override a dynamic RP If override_dynamic is configured the static RP will override any dynamically l...

Page 820: ...roup ipv6networkaddr Parameters ipv6networkaddr Specify the multicast group network address for this static RP Restrictions Only Administrator Operator and Power User level users can issue this comman...

Page 821: ...n config pim6 embedded_rp state enable Command config pim6 embedded_rp state enable Success DGS 3120 24TC admin 81 18 show pim6 crp Description This command is used to display all candidate rendezvous...

Page 822: ...im6 static_rp Parameters None Restrictions None Example To show the static RP DGS 3120 24TC admin show pim6 static_rp Command show pim6 static_rp PIM6 Static RP Table Group FF02 64 RP Address 3000 12...

Page 823: ...tic Total Entries 2 DGS 3120 24TC admin 81 21 config pim6 register_checksum_calculate Description This command is used to decide whether the checksum in register packet will include the data portion F...

Page 824: ...ister_probe_time sec 1 127 Parameters sec 1 127 Enter the time before the Register Stop Timer RST expires when a DR may send a Null Register to the RP to cause it to resend a Register Stop message The...

Page 825: ...ion_time 120 Success DGS 3120 24TC admin 81 24 config pim6 keepalive_period Description This command is used to configure the PIM6 SM multicast routing entry Keepalive Timer Format config pim6 keepali...

Page 826: ...delete protocol_group group_id int 1 16 all show port dot1v ports portlist 82 1 create dot1v_protocol_group Description This command is used to create a protocol group for protocol VLAN function Form...

Page 827: ...the protocol will be added to the specified group delete Specify that the protocol will be removed from the specified group protocol The protocol value is used to identify a protocol of the frame typ...

Page 828: ...delete dot1v_protocol_group group_id 100 Command delete dot1v_protocol_group group_id 100 Success DGS 3120 24TC admin 82 4 show dot1v_protocol_group Description This command is used to display the pr...

Page 829: ...rts used for the configuration here all Specify that all the ports will be used for this configuration add Specify that the group specified will be added protocol_group Specify that parameters for the...

Page 830: ..._id 10 vlan marketing 1 Command config port dot1v ports 1 3 add protocol_group group_id 10 vlan marketing 1 Success DGS 3120 24TC admin 82 6 show port dot1v Description This command is used to display...

Page 831: ...abit Ethernet Switch CLI Reference Guide 826 DGS 3120 24TC admin show port dot1v ports 1 1 Command show port dot1v ports 1 1 Port 1 1 Protocol Group ID VLAN Name Protocol Priority 1 default 2 VLAN2 3...

Page 832: ...094 priority priority 0 7 delete vlan_translation ports portlist all cvid vidlist show vlan_translation ports portlist cvid vidlist 83 1 enable qinq Description This command is used to enable QinQ Whe...

Page 833: ...be disabled To run GVRP on the Switch the administrator should enable GVRP manually Format disable qinq Parameters None Restrictions Only Administrator Operator and Power User level users can issue t...

Page 834: ...the port role in QinQ mode uni Specify that the port is connecting to the customer network nni Specify that the port is connecting to the service provider network missdrop Optional Specify the state...

Page 835: ...ts 1 1 1 4 role nni outer_tpid 0x88A8 Command config qinq ports 1 1 1 4 role nni outer_tpid 0x88A8 Success DGS 3120 24TC admin 83 5 show qinq Description This command is used to display the global Qin...

Page 836: ...show qinq inner_tpid Command show qinq inner_tpid Inner TPID 0x9100 DGS 3120 24TC admin 83 7 show qinq ports Description This command is used to display the QinQ configuration of the ports Format sho...

Page 837: ...red to C VLAN Tag or stripped Format create vlan_translation ports portlist all add cvid vidlist replace cvid vlanid 1 4094 svid vlanid 1 4094 priority priority 0 7 Parameters ports Specify a list of...

Page 838: ...id 30 svid 300 Command create vlan_translation ports 1 1 add cvid 30 svid 300 Success DGS 3120 24TC admin 83 9 delete vlan_translation ports Description This command is used to delete translation rela...

Page 839: ...es Format show vlan_translation ports portlist cvid vidlist Parameters ports Optional Specify a list of ports to be displayed portlist Enter the list of ports to be displayed here cvid Optional Specif...

Page 840: ...y dscp_list to priority 0 7 dscp_dscp dscp_list to dscp 0 63 show dscp map portlist dscp_priority dscp_dscp dscp dscp_list 84 1 config bandwidth_control Description This command is used to configure t...

Page 841: ...ccess DGS 3120 24TC admin 84 2 show bandwidth_control Description This command is used to display the port bandwidth configurations The bandwidth can also be assigned by the RADIUS server through the...

Page 842: ...fy a range of ports to be configured portlist Enter the list of port used for this configuration here all For set all ports in the system you may use all parameter If no parameter is specified system...

Page 843: ...S 3120 24TC admin config per_queue bandwidth_control ports 1 1 1 10 1 min_rate 130 max_rate 1000 Command config per_queue bandwidth_control ports 1 1 1 10 1 min_rate 130 max_rate 1000 Granularity TX 8...

Page 844: ...nge of ports to be configured portlist Enter the list of port used for this configuration here class_id 0 7 This specifies the 8 hardware priority queues which the config scheduling command will apply...

Page 845: ...strict All queues operate in strict mode wrr Each queue operates based on its setting Restrictions Only Administrator Operator and Power User level users can issue this command Example To configure th...

Page 846: ...ty queues for example DGS 3120 24TC admin show scheduling 1 1 Command show scheduling 1 1 QOS Output Scheduling On Port 1 1 Class ID Weight Class 0 1 Class 1 2 Class 2 3 Class 3 4 Class 4 5 Class 5 6...

Page 847: ...1 16 Strict 1 17 Strict 1 18 Strict 1 19 Strict 1 20 Strict 1 21 Strict 1 22 Strict 1 23 Strict 1 24 Strict DGS 3120 24TC admin 84 9 config 802 1p user_priority Description This command is used to map...

Page 848: ...d Power User level users can issue this command Example To configure the 802 1p user priority DGS 3120 24TC admin config 802 1p user_priority 1 3 Command config 802 1p user_priority 1 3 Success DGS 31...

Page 849: ...y is to be configured That is a range of ports for which all untagged packets received will be assigned the priority specified below The port list is specified by listing the lowest switch number and...

Page 850: ...h the RADIUS sever can be per port or port user For per port authentication the priority assigned by RADIUS server will be the effective port default priority For per user authentication the priority...

Page 851: ...24TC admin 84 13 enable hol_prevention Description This command is used to enable head of line prevention on the Switch Format enable hol_prevention Parameters None Restrictions Only Administrator Ope...

Page 852: ...can issue this command Example To disable HOL prevention on the Switch DGS 3120 24TC admin disable hol_prevention Command disable hol_prevention Success DGS 3120 24TC admin 84 15 show hol_prevention D...

Page 853: ...ation here all Specify that the command apply to all ports on the Switch state Enable or disable to trust DSCP By default DSCP trust is disabled enable Specify that the DSCP trust state will be enable...

Page 854: ...ng The mapping of DSCP to priority will be used to determine the priority of the packet which will be then used to determine the scheduling queue when the port is in DSCP trust state The mapping of DS...

Page 855: ...63 Specify the result DSCP of mapping Restrictions Only Administrator Operator and Power User level users can issue this command Example To configure the mapping of the DSCP priority to priority 1 DG...

Page 856: ...rictions None Example In case of project support per port configure show DSCP map configuration on port 1 1 DGS 3120 24TC admin show dscp map 1 1 dscp_dscp Command show dscp map 1 1 dscp_dscp DSCP to...

Page 857: ...he system is saved by using the save command the configuration of the reboot schedule also won t be saved Format config reboot schedule in min 1 43200 at end_time hh mm date ddmthyyyy save_before_rebo...

Page 858: ...This example shows how to reboot the device at 1 September 2013 23 00 and save all configurations before rebooting DGS 3120 24TC admin config reboot schedule at 23 00 01sep2013 save_before_reboot Comm...

Page 859: ...t 1 Sep 2013 23 00 00 in 26234 minutes Save before reboot Yes DGS 3120 24TC admin 85 3 delete reboot schedule Description This command is used to delete the reboot schedule Format delete reboot schedu...

Page 860: ...ction is to mirror packets to a remote switch A packet travels from the Switch where the monitored packet is received passing through the intermediate switch and then to the Switch where the sniffer i...

Page 861: ...d to disable the RSPAN function Format disable rspan Parameters None Restrictions Only Administrator and Operator level users can issue this command Example Configure RSPAN state to disabled DGS 3120...

Page 862: ...lan vlan_name v2 Command create rspan vlan vlan_name v2 Success DGS 3120 24TC admin To create an RSPAN VLAN entry by VLAN ID 3 DGS 3120 24TC admin create rspan vlan vlan_id 3 Command create rspan vlan...

Page 863: ...VLAN name here vlan_id Specify the RSPAN VLAN by VLAN ID value 1 4094 Enter the VLAN ID here This value must be between 1 and 4094 redirect Specify output portlist for the RSPAN VLAN packets If the r...

Page 864: ...entry for per flow RSPAN without any source ports DGS 3120 24TC admin config rspan vlan vlan_id 2 source Command config rspan vlan vlan_id 2 source Success DGS 3120 24TC admin To add redirect ports fo...

Page 865: ...me here vlan_id Optional Specify the RSPAN VLAN by VLAN ID value 1 4094 Enter the VLAN ID here This value must be between 1 and 4094 Restrictions None Example Display the specific settings DGS 3120 24...

Page 866: ..._list_in access_list list_name 16 none 1 config rip timers update sec 5 65535 timeout sec 5 65535 garbage_collection sec 5 65535 1 show rip ipif ipif_name 12 87 1 enable rip Description This command i...

Page 867: ...if_name Specify the IP interface name used for this configuration ipif_name 12 Enter the IP interface name used here This name can be up to 12 characters long all Specify that all the IP interfaces wi...

Page 868: ...n will not take effective until user create the access list list_name 16 Enter the access list name none Do not filter receiving RIP routes Restrictions Only Administrator Operator and Power User leve...

Page 869: ...tion 240 Success DGS 3120 24TC admin 87 5 show rip Description This command is used to display the RIP configuration for one or all IP interfaces Format show rip ipif ipif_name 12 Parameters ipif Opti...

Page 870: ...how rip Command show rip RIP Global State Enabled Update Time 30 seconds Timeout Time 180 seconds Garbage Collection Time 120 seconds RIP Interface Settings Interface IP Address TX Mode RX Mode Authen...

Page 871: ...e redistribute dst ripng src local static ospfv3 metric value 0 16 config ipv6route redistribute dst ripng src local static ospfv3 metric value 0 16 delete ipv6route redistribute dst ripng src local s...

Page 872: ...plit_horizon poison_reverse update sec 5 65535 expire sec 1 65535 garbage_collection sec 1 65535 1 Parameters method Specify the method of RIPng no_horizon Specify not to use any horizon split_horizon...

Page 873: ...l Specify all interfaces to be configured state Specify the RIPng state on the selected interfaces enable Specify to enable the RIPng state disable Specify to disable the RIPng state metric The cost v...

Page 874: ...ed Method Poison Reverse Update Time 30 seconds Expire Time 180 seconds Garbage Collection Time 120 seconds Interface State Metric int8 Disabled 1 int14 Disabled 1 Total Entries 2 IPv6 Route Redistrib...

Page 875: ...ate RIPng route redistribution DGS 3120 24TC admin create ipv6route redistribute dst ripng src local Command create ipv6route redistribute dst ripng src local Success DGS 3120 24TC admin 88 7 config i...

Page 876: ...and is used to remove RIPng route redistribution to stop importing routes from other routing domain into RIPng domain Format delete ipv6route redistribute dst ripng src local static ospfv3 Parameters...

Page 877: ...al static ospf RI Mode Only show route redistribute RI Mode Only show route redistribute dst ospf src local static rip RI Mode Only show route redistribute dst rip src local static ospf RI Mode Only c...

Page 878: ...nd EI Mode Only value 1 4 Enter the weight value used here This value must be between 1 and 4 null0 Specify the null interface as the next hop RI Mode Only ip_tunnel Specify the IP tunnel interface of...

Page 879: ...ardware Parameters network_address Optional Specify the destination network address of the route to be displayed RI and EI Mode Only ipaddr Optional Specify the destination IP address of the route to...

Page 880: ...ence of static route The default value is 60 default Configure the preference of default route The default value is 1 rip Configure the preference of RIP route The default value is 100 ospfIntra Confi...

Page 881: ...ld is OSPF If the metric type is not specified it will be type 2 metric Optional Specify the metric for the redistributed routes value 0 16777214 Enter the value between 0 and 16777214 If it is not sp...

Page 882: ...es will be associated with the default metric 20 route_map Optional Specify the route map for the redistributed routes map_name 16 Enter the name of the route map no_route_map Optional Specify to remo...

Page 883: ...p_name 16 Parameters local Redistribute local routes into RIP static Redistribute static routes into RIP ospf Redistribute OSPF routes into RIP all Redistribute both OSPF AS internal and OSPF AS exter...

Page 884: ...y redistribute OSPF AS internal routes external Only redistribute OSPF AS external routes including type 1 and type 2 routes type_1 Only redistribute OSPF AS internal type 1 routes type_2 Only redistr...

Page 885: ...col as static ospf Specify the source protocol as OSPF Restrictions Only Administrator Operator and Power User level users can issue this command Example To delete route redistribution settings DGS 31...

Page 886: ...24TC admin 89 12 show route redistribute dst ospf RI Mode Only Description This command is used to display the redistribution with the target protocol OSPF Format show route redistribute dst ospf src...

Page 887: ...h the target protocol RIP Format show route redistribute dst rip src local static ospf Parameters src Optional Specify the source protocol local Display the redistribution with the source local static...

Page 888: ...nal Specify to include the lower 5 bits of the source IP in the ECMP algorithm crc_low Optional Specify to include the lower 5 bits of the CRC in the ECMP algorithm crc_high Optional Specify to includ...

Page 889: ...120 24TC admin 89 16 show ipfdb Description This command is used to display the current network address forwarding database Format show ipfdb ip_address ipaddr interface ipif_name 12 port port Paramet...

Page 890: ...f ospfIntra ospfInter ospfExt1 ospfExt2 Parameters local Optional Display the preference of local route static Optional Display the preference of static route default Optional Display the preference o...

Page 891: ...115 DGS 3120 24TC admin 89 18 enable ecmp ospf RI Mode Only Description This command is used to activate the OSPF ECMP function Format enable ecmp ospf Parameters None Restrictions Only Administrator...

Page 892: ...Guide 887 Format disable ecmp ospf Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To disable the OSPF ECMP function DGS 3120 24TC a...

Page 893: ...ter state all Specify all ports to be configured for the RPC portmapper filter state state Specify the RPC portmapper filter state enable Enable the RPC portmapper filter on specified ports disable Di...

Page 894: ...t Ethernet Switch CLI Reference Guide 889 Parameters None Restrictions None Example To display the RPC portmapper state DGS 3120 24TC admin show filter rpc_portmapper Command show filter rpc_portmappe...

Page 895: ...n falling threshold the range is between 20 100 if the CPU utilization is lower than the falling threshold the Switch enters normal mode 20 100 Enter the utilization falling value here This value must...

Page 896: ..._engine Description This command is used to show safeguard engine information Format show safeguard_engine Parameters None Restrictions None Example To show safeguard_engine information DGS 3120 24TC...

Page 897: ...m If the time range does not exist the schedule will still be created without prompt But the schedule will not take effective until the time range is created To create an existed entry the device will...

Page 898: ...configuration log Schedule to back up log time_range The schedule to back up the configuration or log range_name32 Enter the name of the time range Maximum 32 characters filename The backup filename o...

Page 899: ...Enter the name of the time range Maximum 32 characters filename Optional The backup filename of the configuration or log that wants to be deleted pathname Enter the backup file path name Restrictions...

Page 900: ...d schedule The maximum of schedules execute is 15 Format create execute_config time_range range_name 32 config pathname state enable disable increment reset Parameters range_name32 Enter the time rang...

Page 901: ...ecute the configuration Maximum 32 characters config The filename of the configuration on file system pathname Enter the configuration file path name state Optional Enable or disable the executive sch...

Page 902: ...iguration to be deleted range_name 32 Enter the time range to be deleted Maximum 32 characters config Optional The configuration file name on file system pathname Enter the configuration file path nam...

Page 903: ...onfiguration on file system Format execute config pathname increment Parameters pathname The configuration filename on file system increment Optional If not specified the current configuration will be...

Page 904: ...rver runs as a subsystem of SSH server SSH server is required to be enabled before enabling SFTP server Format enable sftp server Parameters None Restrictions Only Administrators Operators and Power U...

Page 905: ...figure parameters for SFTP server Format config sftp server timeout sec 30 600 Parameters timeout Specify the idle timer for SFTP server If the SFTP server detects no operation after this duration for...

Page 906: ...n This command is used to show the parameters of the SFTP server Format show sftp server Parameters None Restrictions None Example To show the parameters of the SFTP server DGS 3120 24TC admin show sf...

Page 907: ...h client_pubkey_owner key_id int 1 8 add remove user username 15 show ssh client_pub_key 94 1 config ssh algorithm Description This command is used to configure SSH service algorithm Format config ssh...

Page 908: ...r User level users can issue this command Example To enable SSH server public key algorithm DGS 3120 24TC admin config ssh algorithm DSA enable Command config ssh algorithm DSA enable Success DGS 3120...

Page 909: ...SHA1 Enabled Public Key Algorithm RSA Enabled DSA Enabled DGS 3120 24TC admin 94 3 config ssh authmode Description This command is used to configure user authentication method for SSH Format config ss...

Page 910: ...4 show ssh authmode Description This command is used to show the user authentication method Format show ssh authmode Parameters None Restrictions None Example To show user authentication method DGS 3...

Page 911: ...host domain name and IP address domain_name 32 Specify host name if configuring Host based method ipaddr Specify host IP address if configuring Host based method ipv6addr Specify host IPv6 address if...

Page 912: ...ify SSH server connection time out in the unit of second sec 30 600 Enter the connection time out value here This value must be between 30 and 600 seconds authfail Optional Specify user maximum fail a...

Page 913: ...uccess DGS 3120 24TC admin 94 8 enable ssh Description This command is used to enable SSH server services Format enable ssh Parameters None Restrictions Only Administrator Operator and Power User leve...

Page 914: ...ower User level users can issue this command Example To disable the SSH server services DGS 3120 24TC admin disable ssh Command disable ssh Success DGS 3120 24TC admin 94 10 show ssh server Descriptio...

Page 915: ...ary authentication after using SSH public key authentication If this method is specified the login user using SSH public key authentication can execute command directly with the initial privilege leve...

Page 916: ...absolute path name If path name is not specified it refers to the TFTP server path path_filename 64 Enter the source file path This can be up to 64 characters long Restrictions Only Administrator leve...

Page 917: ...p Once the authorized public keys file each line of the file contains one key is downloaded to the switch each key will be automatically assigned an index which starts from one The administrator can a...

Page 918: ...command Example This example shows how to associate a public key with the index of 1 to the user account named User1 DGS 3120 24TC admin config ssh client_pubkey_owner key_id 1 add user User1 Command...

Page 919: ...TA8SR7q0tZcywKcTujES0Ue muoyy tJhTZuI2B2Z4A4ufJ1yCR9NTWrL4mhJNJOspGLssBeHbf6HtGwyInYm5MJBqeoht0RrS8NIa2VWsvQc xQQSoNeS7J5ROvfSpgTdYBsTosJUHzBvNsGy4w1S0 rsa key 20110603 Key ID 2 User Name User1 Key s...

Page 920: ...download the certificate to the device according to the certificate level The user can download the specified certificate to the device which must according to desired key exchange algorithm For RSA k...

Page 921: ...tional Specify the cipher suite combination used for this configuration RSA_with_RC4_128_MD5 Specify to use the RSA key exchange with RC4 128 bit encryption using the MD5 hash RSA_with_3DES_EDE_CBC_SH...

Page 922: ...r this configuration RSA_with_RC4_128_MD5 Specify to use the RSA key exchange with RC4 128 bit encryption using the MD5 hash RSA_with_3DES_EDE_CBC_SHA Specify to use the RSA key exchange with 3DES EDE...

Page 923: ...s can issue this command Example To delete a certificate DGS 3120 24TC admin delete ssl certificate web_ca2 cer Command delete ssl certificate web_ca2 cer Success DGS 3120 24TC admin 95 5 show ssl Des...

Page 924: ...BC_SHA 0x0013 Enabled RSA_EXPORT_WITH_RC4_40_MD5 0x0003 Enabled DGS 3120 24TC admin To show certificate DGS 3120 24TC admin show ssl certificate Command show ssl certificate DGS 3120 24TC admin 95 6 s...

Page 925: ...ver and invoking the dlktimer library to remove this session id by cache timeout value The unit of argument s value is second and it s boundary is between 60 1 minute and 86400 24 hours Default value...

Page 926: ...tificates to constitute the SSL certificate chain cert_list Specify chain of certifications on the Switch Restrictions Only Administrator level users can issue this command Example To configure SSL ch...

Page 927: ...mst_ports portlist instance_id value 0 15 internalCost auto value 1 200000000 priority value 0 240 config stp ports portlist externalCost auto value 1 200000000 hellotime value 1 2 migrate yes no edge...

Page 928: ...r and Power User level users can issue this command Example To disable STP DGS 3120 24TC admin disable stp Command disable stp Success DGS 3120 24TC admin 96 3 config stp Description This command is u...

Page 929: ...bers of BPDU transmitted in a time interval value 1 10 Enter the transmitted BPDU restriction value here This value must be between 1 and 10 fbpdu Optional To decide if the bridge will flood STP BPDU...

Page 930: ...ogy Change Trap Enabled NNI BPDU Address dot1d DGS 3120 24TC admin 96 5 create stp instance_id Description This command is used to create an MST Instance without mapping the corresponding VLANs Format...

Page 931: ...default instance CIST value 1 15 Enter the MSTP instance ID here This value must be between 1 and 15 add_vlan Specify to map the specified VLAN list to an existing MST instance remove_vlan Specify to...

Page 932: ...e DGS 3120 24TC admin delete stp instance_id 2 Command delete stp instance_id 2 Success DGS 3120 24TC admin 96 8 config stp mst_config_id Description This command is used to change the name or the rev...

Page 933: ...admin 96 9 show stp mst_config_id Description This command is used to show the MST configuration identification Format show stp mst_config_id Parameters None Restrictions None Example show STP MST co...

Page 934: ...ns Only Administrator Operator and Power User level users can issue this command Example To configure STP MST ports DGS 3120 24TC admin config stp mst_ports 1 1 instance_id 0 internalCost auto Command...

Page 935: ...n the port s is enabled disable Specify that STP functionality on the port s is disabled restricted_role Optional To decide if this port not to be selected as Root Port The default value is false true...

Page 936: ...rt Index 1 1 Hello Time 2 2 Port STP Enabled External PathCost Auto 200000 Edge Port False No P2P Auto Yes Port RestrictedRole False Port RestrictedTCN False Port Forward BPDU Disabled MSTI Designated...

Page 937: ..._id 0 Success DGS 3120 24TC admin 96 14 config stp trap Description This command is used to enable or disable sending STP traps Format config stp trap topo_change disable enable new_root enable disabl...

Page 938: ...wer User level users can issue this command Example To configure STP version DGS 3120 24TC admin config stp version mstp Command config stp version mstp Success DGS 3120 24TC admin To config STP versi...

Page 939: ...min show stp instance Command show stp instance STP Instance Settings Instance Type CIST Instance Status Enabled Instance Priority 32768 bridge priority 32768 sys ID ext 0 STP Instance Operational Sta...

Page 940: ...1 enable surveillance_vlan Description This command is used to enable surveillance VLAN globally To enable the surveillance VLAN a name must be assigned to the sureveillance VLAN and there must be an...

Page 941: ...mmand disable surveillance_vlan Success DGS 3120 24TC admin 97 3 config surveillance_vlan priority Description This command is used to configure the surveillance VLAN priority which is associated with...

Page 942: ...ined OUI MAC address macmask The user defined OUI MAC address mask component_type Optional Specify the surveillance components that could be auto detected by surveillance VLAN vms Specify the Video Ma...

Page 943: ...tate on ports 4 6 of unit 1 DGS 3120 24TC admin config surveillance_vlan ports 1 4 1 6 state enable Command config surveillance_vlan ports 1 4 1 6 state enable Success DGS 3120 24TC admin 97 6 config...

Page 944: ...used to configure the log state of the surveillance VLAN Format config surveillance_vlan log state enable disable Parameters enable Specify to enable the log state of the surveillance VLAN disable Spe...

Page 945: ...splayed device Optional The Surveillance devices that are learned through their OUI ports Optional Specify a range of ports to be displayed portlist Enter a range of ports to be displayed Restrictions...

Page 946: ...sflow flow_sampler show sflow counter_poller show sflow analyzer_server 98 1 create sflow flow_sampler Description This command is used to create the sFlow flow sampler By configuring the sampling fun...

Page 947: ...te a new one Format config sflow flow_sampler ports portlist all rate value 0 65535 maxheadersize value 18 256 Parameters ports Specify the list of ports to be configured portlist Enter the list of po...

Page 948: ...of ports to be configured portlist Enter the list of ports that will be used for this configuration here all Specify all ports on the Switch Restrictions Only Administrator and Operator level users c...

Page 949: ...command Example Create sFlow counter poller which sample port 1 to analyzer server 1 DGS 3120 24TC admin create sflow counter_poller ports 1 1 analyzer_server_id 1 Command create sflow counter_poller...

Page 950: ...orts Specify the list of ports to delete the counter poller portlist Enter the list of ports that will be used for this configuration here all Specify all ports on the Switch Restrictions Only Adminis...

Page 951: ...s is 0 and the entry is not active ipaddr Enter the IP address used for the configuration here collectorport Optional The destination UDP port for sending the sFlow datagram If not specified the defau...

Page 952: ...packets will not be sent to this server ipaddr Enter the IP address used for the configuration here collectorport Optional The destination UDP port for sending the sFlow datagram If not specified the...

Page 953: ...can issue this command Example To delete an analyzer server DGS 3120 24TC admin delete sflow analyzer_server 1 Command delete sflow analyzer_server 1 Success DGS 3120 24TC admin 98 10 enable sflow Des...

Page 954: ...ions Only Administrator and Operator level users can issue this command Example Disable the sFlow globally DGS 3120 24TC admin disable sflow Command disable sflow Success DGS 3120 24TC admin 98 12 sho...

Page 955: ...displayed rate value There are two types of rates The Configured Rate is configured by the user In order to limit the number of packets sent to the CPU when the rate of traffic to the CPU is high the...

Page 956: ...ormation of ports which have been created DGS 3120 24TC admin show sflow counter_poller Command show sflow counter_poller Port Analyzer Server ID Polling Interval sec 1 1 1 Disable Total Entries 1 DGS...

Page 957: ...analyzer_server Command show sflow analyzer_server sFlow Analyzer_server Information Server ID 1 Owner sflow Timeout 400 Current Countdown Time 400 Collector Address 10 90 90 90 Collector Port 6343 Ma...

Page 958: ...l to dump the device overall operation information The output includes the following information Basic System information System log Running configuration Layer 1 information Layer 2 information Layer...

Page 959: ...3 00 501 Firmware Version Build 4 00 015 Hardware Version B1 Serial number PVT93CB000002 MAC Address 10 BF 48 D0 E0 E0 MAC Address Number 65535 STACKING 2013 11 30 09 38 25 Topology Information Stabl...

Page 960: ...upted by Ctrl C or ESC when it is executing Format upload tech_support_toTFTP ipaddr path_filename 64 Parameters ipaddr Specify the IP address of TFTP server path_filename 64 Specify the file name to...

Page 961: ...add mail_receiver mail_addr 254 delete mail_receiver index 1 8 1 show smtp smtp send_testmsg 100 1 enable smtp Description This command is used to enable the SMTP status Format enable smtp Parameters...

Page 962: ...ceiver mail_addr 254 delete mail_receiver index 1 8 1 Parameters server Specify the SMTP server IP address ipaddr Enter the SMTP server IP address server_port Specify the SMTP server port port_number...

Page 963: ...nfigure a mail source address DGS 3120 24TC admin config smtp self_mail_addr mail dlink com Command config smtp self_mail_addr mail dlink com Success DGS 3120 24TC admin To add a mail destination addr...

Page 964: ...n DGS 3120 24TC admin show smtp Command show smtp SMTP Status Disabled SMTP Server Address 172 18 208 9 SMTP Server Port 25 Self Mail Address mail dlink com Index Mail Receiver Address 1 receiver dlin...

Page 965: ...Restrictions Only Administrator level users can issue this command Example To test whether the SMTP server can be reached DGS 3120 24TC admin smtp send_testmsg Command smtp send_testmsg Subject e mai...

Page 966: ...ps create snmp view view_name 32 oid view_type included excluded delete snmp view view_name 32 all oid show snmp view view_name 32 enable snmp disable snmp create snmp host ipaddr v6host ipv6addr v1 v...

Page 967: ...view view_name 32 read_only read_write Parameters community An alphanumeric string of up to 32 characters used to authentication of users wanting access to the Switch s SNMP agent community_string Ent...

Page 968: ...s on the Switch read_write Specify that SNMP community members using the community string created can read from and write to the contents of the MIBs on the Switch Restrictions Only Administrator leve...

Page 969: ...This command is used to display the community string configurations Format show snmp community community_string 32 Parameters community_string 32 Optional Specify the Community string If not specify...

Page 970: ...ication level auth_password 8 20 Enter the SHA authentication password here This value must be between 8 and 20 characters priv Optional A privacy key used by DES it is hex string type none Specify th...

Page 971: ...to remove a user from an SNMP group and delete the associated group in SNMP group Format delete snmp user username 32 Parameters username 32 The name of the user on the host that connects to the agen...

Page 972: ...me of the group groupname 32 Enter the group name here This name can be up to 32 characters long v1 The least secure of the possible security models v2c The second least secure of the possible securit...

Page 973: ...create snmp group group123 v3 auth_priv read_view CommunityView write_view CommunityView notify_view CommunityView Success DGS 3120 24TC admin 101 9 delete snmp group Description This command is used...

Page 974: ...ference Guide 969 101 10 show snmp groups Description This command is used to display the names of groups on the Switch and the security model level the status of the different views Format show snmp...

Page 975: ...Name initial ReadView Name restricted WriteView Name Notify View Name restricted Securiy Model SNMPv3 Securiy Level NoAuthNoPriv Group Name WriteGroup ReadView Name CommunityView WriteView Name Commu...

Page 976: ...nd create snmp view view123 1 3 6 view_type included Success DGS 3120 24TC admin 101 12 delete snmp view Description This command is used to remove a view record Format delete snmp view view_name 32 a...

Page 977: ...mple To show SNMP view DGS 3120 24TC admin show snmp view Command show snmp view Vacm View Table Settings View Name Subtree View Type view123 1 3 6 Included restricted 1 3 6 1 2 1 1 Included restricte...

Page 978: ...nable SNMP DGS 3120 24TC admin enable snmp Command enable snmp Success DGS 3120 24TC admin 101 15 disable snmp Description This command is used to disable the SNMP function Format disable snmp Paramet...

Page 979: ...models v3 The most secure of the possible noauth_nopriv Neither support packet authentication nor encrypting auth_nopriv Support packet authentication auth_priv Support packet authentication and encr...

Page 980: ...pient for which the traps are targeted ipv6addr Enter the IPv6 address used for the configuration here Restrictions Only Administrator level users can issue this command Example To delete SNMP host 10...

Page 981: ...addr Parameters host Optional The IP address of the recipient for which the traps are targeted ipaddr Enter the IP address used for the configuration here If no parameter specified all SNMP hosts will...

Page 982: ...will be displayed Restrictions None Example To show SNMP host DGS 3120 24TC admin show snmp v6host Command show snmp v6host SNMP Host Table Host IPv6 Address 3FFE 3 SNMP Version V3 na np Community Na...

Page 983: ...l users can issue this command Example To configure SNMP engine ID to 1023457890 DGS 3120 24TC admin config snmp engineID 1023457890 Command config snmp engineID 1023457890 Success DGS 3120 24TC admin...

Page 984: ...me sw_name Parameters system_name A maximum of 128 characters is allowed And NULL string is accepted sw_name Optional Enter the system name used here Restrictions Only Administrator and Operator level...

Page 985: ...onfig snmp system_location HQ 5F Success DGS 3120 24TC admin 101 25 config snmp system_contact Description This command is used to enter the name of a contact person who is responsible for the Switch...

Page 986: ...ator level users can issue this command Example To enable SNMP trap support DGS 3120 24TC admin enable snmp traps Command enable snmp traps Success DGS 3120 24TC admin 101 27 disable snmp traps Descri...

Page 987: ...ap support Format enable snmp authenticate_traps Parameters None Restrictions Only Administrator and Operator level users can issue this command Example To enable SNMP authentication trap support DGS...

Page 988: ...le snmp linkchange_traps Description This command is used to configure the sending of linkchange traps Format enable snmp linkchange_traps Parameters None Restrictions Only Administrator and Operator...

Page 989: ...ure the sending of linkchange traps and per port control for sending of change trap Format config snmp linkchange_traps ports all portlist enable disable Parameters all To specify all ports portlist T...

Page 990: ...nly Administrator level users can issue this command Example To configure the trap for coldstart event DGS 3120 24TC admin config snmp coldstart_traps enable Command config snmp coldstart_traps enable...

Page 991: ...w snmp traps linkchange_traps ports portlist Parameters linkchange_traps Optional Specify that the SNMP trap sending status will be displayed ports Optional Specify the ports for the display portlist...

Page 992: ...lling alarm The default state is enabled enable Specify that the falling alarm function will be enabled disable Specify that the falling alarm function will be disabled Restrictions Only Administrator...

Page 993: ...ion state on SNMP community string Format enable community_encryption Parameters None Restrictions Only Administrator level users can issue this command Example To enable the encryption state on SNMP...

Page 994: ...ion Command disable community_encryption Success DGS 3120 24TC admin 101 40 show community_encryption Description This command is used to display the encryption state on SNMP community string Format s...

Page 995: ...oupname 64 candidate dp_interval sec 30 90 hold_time sec 100 255 download sim_ms firmware_from_tftp configuration_from_tftp ipaddr path_filename members mslist 1 32 all upload sim_ms configuration_to_...

Page 996: ...play the current information of the specific sort of devices Format show sim candidates candidate_id 1 100 members member_id 1 32 group commander_mac macaddr neighbor Parameters candidates Optional Sp...

Page 997: ...Interval 30 sec Hold Time 100 sec DGS 3120 24TC admin To show the candidate information in summary if user specify candidate id it would show information in detail DGS 3120 24TC admin show sim candida...

Page 998: ...ion in summary if user specify group name it will show information in detail DGS 3120 24TC admin show sim group Command show sim group SIM Group Name default ID MAC Address Platform Hold Firmware Devi...

Page 999: ...command is used to re telnet to member Format reconfig member_id value 1 32 exit Parameters member_id Specify the serial number of the member value 1 32 Enter the serial number of the member here exit...

Page 1000: ...the member ID of the member to be removed from the group here This value must be between 1 and 32 Restrictions Only Administrator Operator and Power User level users can issue this command Example To...

Page 1001: ...y time here in seconds This value must be between 30 and 90 seconds hold_time The time in seconds the device holds the discovery result sec 100 255 Enter the hold time here in seconds This value must...

Page 1002: ...tp ipaddr path_filename members mslist 1 32 all Parameters firmware_from_tftp Specify that the firmware will be downloaded from the TFTP server configuration_from_tftp Specify that the configuration w...

Page 1003: ...his device is updating firmware Please wait several minutes Download Status ID MAC Address Result 1 00 01 02 03 04 00 Success DGS 3120 24TC admin 102 8 upload sim_ms Description This command is used t...

Page 1004: ...This device is uploading configuration Please wait several minutes Upload Status ID MAC Address Result 1 00 1A 2D 00 12 12 Success DGS 3120 24TC admin 102 9 config sim trap Description This command is...

Page 1005: ...is command is used to configure the priority of switch which will determines which box becomes master A lower number means a higher priority The new priority will take effect after the Switch was rebo...

Page 1006: ...r range is 1 m where the m is determined by device type For example to the DGS3120 Series it is 6 value 1 6 Enter the current box ID here This value must be between 1 and 6 new_box_id Specify the new...

Page 1007: ...ction after the timer reaches 0 If topology change is detected again before the count down timer reaches 0 the count down timer will be reset It is suggested for the user not to do any command regardi...

Page 1008: ...State Enabled Box User Prio Prom Runtime H W ID Set Type Exist rity MAC version version version 1 Auto DGS 3120 24TC Exist 1 00 01 02 03 04 00 3 00 501 4 00 015 B1 2 NOT_EXIST No 3 NOT_EXIST No 4 NOT...

Page 1009: ...ged under standalone mode only Format config stacking_mode disable enable Parameters stacking_mode Enable or disable the Switch s stacking capability enable Specify that the Switch s stacking capabilt...

Page 1010: ...still uses old priority setting and MAC to compare device priority After stacking is stable master s priority will become zero If stacking topology change again Master will use priority zero and MAC...

Page 1011: ...rameters enable Enable the Switch s stacking trap disable Disable the Switch s stacking trap Restrictions Only Administrator Operator and Power User level users can issue this command Example To enabl...

Page 1012: ...rence Guide 1007 Restrictions Only Administrator Operator and Power User level users can issue this command Example To enable the stacking log state DGS 3120 24TC admin config stacking log state enabl...

Page 1013: ...eck by IP multicast route protocol rpf_address Specify the RPF address of the static multicast route entry that is created on the Switch If the source IP address of the received IP multicast packet ma...

Page 1014: ...te entries Restrictions Only Administrator Operator and Power User level users can issue this command Example To delete a static multicast route entry DGS 3120 24TC admin delete ipmroute 11 0 0 0 8 Co...

Page 1015: ...es Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 1010 DGS 3120 24TC admin show ipmroute Command show ipmroute Index Source IP Address RPF IP Address 1 11 0 0 0 8 20 1 1 1 Total Entries 1...

Page 1016: ...specify this parameter the least IPv4 address and the smallest IPv6 address of ipif_name will be used as source IP addresses ipif_name 12 Enter the IP interface name here This name can be up to 12 ch...

Page 1017: ...g source IP interface Format show syslog source_ipif Parameters None Restrictions None Example Show syslog source IP interface DGS 3120 24TC admin show syslog source_ipif Command show syslog source_ip...

Page 1018: ...ess used for the configuration here none Specify to clear the configured source IP interface Restrictions Only Administrator and Operator level users can issue this command Example Configure trap sour...

Page 1019: ...t Ethernet Switch CLI Reference Guide 1014 Example Show trap source IP interface DGS 3120 24TC admin show trap source_ip Command show trap source_ip Trap Source IP Interface Configuration IP Interface...

Page 1020: ...p_port_number state enable disable config syslog host index 1 4 all severity emergency alert critical error warning notice informational debug level 0 7 facility local0 local1 local2 local3 local4 loc...

Page 1021: ...le can be obtained by using the show log_support_module command Use a comma to separate multiple modules module_list Enter the module list value here emergency Optional Severity level 0 alert Optional...

Page 1022: ...software_module Description This command is used to display the protocols or applications that support the enhanced log The enhanced log adds the module name and module ID Network administrators can d...

Page 1023: ...messages DGS 3120 24TC admin enable syslog Command enable syslog Success DGS 3120 24TC admin 106 5 disable syslog Description This command is used to disable the sending of syslog messages Format dis...

Page 1024: ...of messages to a specific host When the user chooses a specific level for a specific host messages which are at that severity level or higher will be reported to that host Format create syslog host i...

Page 1025: ...ity will be set to local 4 local5 Specify that the user defined facility will be set to local 5 local6 Specify that the user defined facility will be set to local 6 local7 Specify that the user define...

Page 1026: ...the syslog packet when it is sent to a specific syslog server local0 Specify that the user defined facility will be set to local 0 local1 Specify that the user defined facility will be set to local 1...

Page 1027: ...Parameters host The host index or all hosts index Enter the host index value here all Specify that all the host indexes will be used Restrictions Only Administrator and Operator level users can issue...

Page 1028: ...This command is used to set the method for saving the log Format config log_save_timing time_interval min 1 65535 on_demand log_trigger Parameters time_interval Save log to flash every xxx minutes If...

Page 1029: ...timing Command show log_save_timing Saving Log Method On_demand DGS 3120 24TC admin 106 13 show attack_log Description This command is used to display the attack log messages The attack log message re...

Page 1030: ...g will be displayed Restrictions None Example To show dangerous messages on the master DGS 3120 24TC admin show attack_log index 1 Command show attack_log index 1 Index Date Time Level Log Text 1 2008...

Page 1031: ...xStack DGS 3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 1026 DGS 3120 24TC admin clear attack_log Command clear attack_log Success DGS 3120 24TC admin...

Page 1032: ...l error warning notice information debug level 0 7 Parameters trap Specify the severity level control for traps log Specify the severity level control for the log all Specify the severity level contro...

Page 1033: ...mmand is used to display the severity level controls for the system Format show system_severity Parameters None Restrictions None Example To show severity level control for system DGS 3120 24TC admin...

Page 1034: ...n_name 255 ipv6addr tcp_port value 1 65535 Parameters ipaddr The IP address of the Telnet server domain_name 255 Enter the domain name of the Telnet server ipv6addr The IPv6 address of the Telnet serv...

Page 1035: ...d all dest_file pathname boot_up cfg_fromTFTP ipaddr ipv6addr domain_name 255 src_file path_filename 64 unit unit_id all increment dest_file pathname Parameters firmware_fromTFTP Specify to download f...

Page 1036: ...oot_up configuration file Restrictions Only Administrator level users can issue this command Example To download firmware from TFTP DGS 3120 24TC admin download firmware_fromTFTP 10 54 71 1 src_file p...

Page 1037: ...to 80 characters long filter_string 80 Optional A filter string is enclosed by symbol Thus the filter string itself cannot contain the character The filter string is case sensitive This string can be...

Page 1038: ...must be between 1 and 6 firmware_toTFTP Specify that the firmware file will be uploaded to the TFTP server ipaddr The IP address of the TFTP server ipv6addr The IPv6 address of the TFTP server domain...

Page 1039: ...g Command upload cfg_toTFTP 10 90 90 99 dest_file 111 cfg unit 1 src_file c config cfg Connecting to server Done Upload configuration Done DGS 3120 24TC admin In case that the designated file does not...

Page 1040: ...s_date start_date 1 31 s_mth start_mth 1 12 s_time start_time hh mm e_date end_date 1 31 e_mth end_mth 1 12 e_time end_time hh mm offset 30 60 90 120 show time 110 1 config sntp Description This comm...

Page 1041: ...s time first Format cconfig sntp ipv6server primary ipv6addr secondary ipv6addr 1 Parameters primary Optional SNTP primary server IPv6 address ipaddr Enter the IP address used for this configuration...

Page 1042: ...tem Clock SNTP Status Disabled IPv4 Primary SNTP Server None IPv4 Secondary SNTP Server None IPv6 Primary SNTP Server None IPv6 Secondary SNTP Server None SNTP Poll Interval 720 sec DGS 3120 24TC admi...

Page 1043: ...Administrator and Operator level users can issue this command Example To disable SNTP DGS 3120 24TC admin disable sntp Command disable sntp Success DGS 3120 24TC admin 110 6 config time Description Th...

Page 1044: ...inute 0 59 Parameters operator Optional Specify the operator of time zone Specify that time should be added or subtracted to or from the GMT hour Optional Specify the hour of time zone gmt_hour 0 13 E...

Page 1045: ...month number of Daylight Saving Time start_mth 1 12 Enter the starting month number of Daylight Saving Time here This value must be between 1 and 12 end_mth 1 12 Enter the ending month number of Dayli...

Page 1046: ...minutes 60 Specify that the offset range will 60 minutes 90 Specify that the offset range will 90 minutes 120 Specify that the offset range will 120 minutes Restrictions Only Administrator and Operato...

Page 1047: ...how time Command show time Current Time Source System Clock Boot Time 9 May 2011 06 20 55 Current Time 9 May 2011 07 46 10 Time Zone GMT 00 00 Daylight Saving Time Disabled Offset In Minutes 60 Repeat...

Page 1048: ...r of routers that a trace route packet can pass The traceroute command will cross while seeking the network path between two devices The range for the TTL is 1 to 60 hops value 1 60 Enter the time to...

Page 1049: ...oute packet can pass The traceroute command will cross while seeking the network path between two devices The range for the TTL is 1 to 60 hops value 1 60 Enter the time to live value here This value...

Page 1050: ...probe 3 1 10 ms 1345 142 11 2 10 ms 2011 14 100 3 10 ms 3000 1 Trace complete DGS 3120 24TC admin Trace the IPv6 routed path between the Switch and 1210 100 11 with port 40000 DGS 3120 24TC admin trac...

Page 1051: ...d value 0 1488100 countdown min 0 min3 30 disable time_interval sec 5 600 Parameters portlist Used to specify a range of ports to be configured all Specify that all the ports will be used for this con...

Page 1052: ...ion parameter min 0 0 disables the forever state meaning that the port will not enter the shutdown forever state min 3 30 Enter the countdown timer value here This value must be between 3 and 30 disab...

Page 1053: ...this command Example To enable both the occurred mode and cleared mode traffic control traps DGS 3120 24TC admin config traffic trap both Command config traffic trap both Success DGS 3120 24TC admin...

Page 1054: ...down 5 10 1 1 1 1 7 Enabled Disabled Disabled shutdown 5 10 1 1 1 1 8 Enabled Disabled Disabled shutdown 5 10 1 1 1 1 9 Enabled Disabled Disabled shutdown 5 10 1 1 1 1 10 Enabled Disabled Disabled shu...

Page 1055: ...ime min 0 min 1 65535 Parameters auto_recover_time The time allowed for auto recovery from shutdown for a port The default value is 0 so no auto recovery is possible the port remains in shutdown forev...

Page 1056: ...xStack DGS 3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 1051...

Page 1057: ...all Specify that all the ports will be used for this configuration forward_list Specify a range of port forwarding domain null Specify a range of port forwarding domain is null all Specify all ports t...

Page 1058: ...system will display all current traffic segmentation tables Restrictions None Example To display traffic segmentation table DGS 3120 24TC admin show traffic_segmentation 1 1 1 10 Command show traffic...

Page 1059: ...ing to prevent any IP address from accessing the Switch provided the user knows the Username and Password When the access interface is not specified the trusted host will be created for all interfaces...

Page 1060: ...figuration here ipv6addr The IPv6 address of the trusted host ipv6addr Enter the IPv6 address used for this configuration here network The network address of the trusted network network_address Enter...

Page 1061: ...te Delete interfaces for that trusted host snmp Optional Specify trusted host for SNMP telnet Optional Specify trusted host for TELNET ssh Optional Specify trusted host for SSH http Optional Specify t...

Page 1062: ...I Reference Guide 1057 Restrictions None Example To display trusted host DGS 3120 24TC admin show trusted_host Command show trusted_host Management Stations IP Address Access Interface 10 48 74 121 SN...

Page 1063: ...config udp_helper delete ipif ipif_name 12 ipaddr show udp_helper udp_port ipif ipif_name 12 115 1 enable udp_helper Description This command is used to enable the UDP helper function on the Switch F...

Page 1064: ...udp_port add time tacacs dns tftp netbios ns netbios ds port_number 0 65535 Parameters time Time service The UDP port is 37 tacacs Terminal Access Controller Access Control System service The UDP por...

Page 1065: ...s 49 dns Domain Naming System The UDP port number is 53 tftp Trivial File Transfer Protocol The UDP port number is 69 netbios ns NetBIOS Name Server The UDP port number is 137 netbios ds NetBIOS Datag...

Page 1066: ...20 0 0 90 Success DGS 3120 24TC admin 115 6 config udp_helper delete ipif Description This command is used to delete a UDP helper server address for specific interface of the Switch Format config udp...

Page 1067: ...meters udp_port Optional Specify the UDP port configured for the UDP helper ipif Optional Specify the name of the IP interface to be configured for the UDP helper ipif_name 12 Enter the name of the IP...

Page 1068: ...dress ipaddr advertisement_interval int 1 255 preempt true false critical_ip ipaddr critical_ip_state enable disable config vrrp ipif ipif_name 12 authtype none simple authdata string 8 ip authdata st...

Page 1069: ...1 255 ipif ipif_name 12 ipaddress ipaddr state enable disable priority int 1 254 advertisement_interval int 1 255 preempt true false critical_ip ipaddr critical_ip_state enable disable Parameters vrid...

Page 1070: ...IP address of a real device on the network If the connection from the virtual router to this IP address fails the virtual router will automatically be disabled A new Master will be elected from the b...

Page 1071: ...ity is set higher than the masters priority it will become the master instead of the current one false Specify if the backup router s priority is higher than the masters priority it will not become th...

Page 1072: ...the authentication algorithm will be set to IP authentication header on this interface authdata Specify the authentication data used in the IP authentication header algorithm string 16 Enter the authe...

Page 1073: ...min 116 7 show vrrp Description This command is used to display the VRRP settings Format show vrrp ipif ipif_name 12 vrid vrid 1 255 Parameters ipif Optional Specify the IP interface name to be displa...

Page 1074: ...0 Master IP Address 10 90 90 90 Critical IP Address 0 0 0 0 Checking Critical IP Disabled Advertisement Interval 1 Sec s Preempt Mode True Virtual Router Up Time 621430 centi secs Total Entries 1 DGS...

Page 1075: ...tack DGS 3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide 1070 DGS 3120 24TC admin config vrrp trap state enable Command config vrrp trap state enable Success DGS 3120 24TC admi...

Page 1076: ...if the direction is not specified Format create vlan_counter vlan vlan_name vlanid vidlist ports portlist all all_frame broadcast multicast unicast packet byte rx tx Parameters vlan Specify the VLAN...

Page 1077: ...3120 24TC admin create vlan_counter vlanid 4 ports 1 5 unicast packet tx Command create vlan_counter vlanid 4 ports 1 5 unicast packet tx Success DGS 3120 24TC admin 117 2 clear vlan_counter statistic...

Page 1078: ...at will be used for this configuration vlanid Specify the VLAN ID that will be used for this configuration vidlist Enter the VLAN ID that will be used for this configuration ports Optional Specify the...

Page 1079: ...e used for this display vlan_name Enter the VLAN name that will be used for this display vlanid Optional Specify the VLAN ID that will be used for this display vidlist Enter the VLAN ID that will be u...

Page 1080: ...display ports Optional Specify the list of ports that will be used for this display portlist Enter the list of ports that will be used for this display all Specify that all ports will be used for thi...

Page 1081: ...the VLAN trunk function When the VLAN trunk function is enabled the VLAN trunk ports shall be able to forward all tagged frames with any VID Format enable vlan_trunk Parameters None Restrictions Only...

Page 1082: ...e VLAN trunk globally all VLANs automatically created by VLAN Trunk enabled shall be destroyed and all the automatically added port membership will be removed A VLAN trunk port and a non VLAN trunk po...

Page 1083: ...state enable Success DGS 3120 24TC admin Port 6 is LA 1 member port port 7 is LA 2 master port DGS 3120 24PC admin config vlan_trunk ports 1 6 1 7 state enable Command config vlan_trunk ports 1 6 1 7...

Page 1084: ...s LA 1 member port port 7 is LA 1 master port DGS 3120 24TC admin config vlan_trunk ports 1 7 state disable Command config vlan_trunk ports 1 7 state disable Success DGS 3120 24TC admin config vlan_tr...

Page 1085: ...VLAN Trunk State Enabled VLAN Trunk Member Ports 1 1 1 5 1 7 VID 1 VLAN Name default VLAN TYPE static Advertisement Enabled Member ports 1 1 1 24 2 1 2 24 Static ports 1 1 1 24 2 1 2 24 Current Tagged...

Page 1086: ...ice 119 1 enable voice_vlan Description This command is used to enable the global voice VLAN function on a switch To enable the voice VLAN the voice VLAN must be also assigned At the same time the VLA...

Page 1087: ...strator Operator and Power User level users can issue this command Example To disable the voice VLAN DGS 3120 24TC admin disable voice_vlan Command disable voice_vlan Success DGS 3120 24TC admin 119 3...

Page 1088: ...defined OUI cannot be the same as the pre defined OUI The following are the pre defined voice traffic s OUI OUI Vendor Mnemonic name 00 E0 BB 3COM 3com 00 03 6B Cisco cisco 00 E0 75 Veritel veritel 0...

Page 1089: ...will be disabled mode The voice VLAN mode The default mode is auto auto Specify that the voice VLAN mode will be set to auto tag When the port is working in auto tagged mode and learns about a voice d...

Page 1090: ...ce VLAN The aging time is used to remove a port from voice VLAN if the port is an automatic VLAN member When the last voice device stops sending traffic and the MAC address of this voice device is age...

Page 1091: ...led a log will be triggered Format config voice_vlan log state enable disable Parameters enable Specify that the sending of a voice VLAN log will be enabled disable Specify that the sending of a voice...

Page 1092: ...ity 5 Aging Time 60 minutes Log State Enabled Member Ports 1 2 1 5 Dynamic Member Ports DGS 3120 24TC admin To display the voice VLAN global information when voice VLAN is disabled DGS 3120 24TC admin...

Page 1093: ...0B 00 00 00 FF FF FF 00 00 00 00 0F E2 00 00 00 FF FF FF 00 00 00 Huawei 3COM 00 60 B9 00 00 00 FF FF FF 00 00 00 NEC Philips 00 D0 1E 00 00 00 FF FF FF 00 00 00 Pingtel 00 E0 75 00 00 00 FF FF FF 00...

Page 1094: ...admin 119 11 show voice_vlan voice device Description This command is used to show voice devices that are connected to the ports The start time is the time when the device is detected on this port an...

Page 1095: ...08 10 6 15 00 1 1 00 E0 BB 00 00 03 2008 10 6 14 20 2008 10 6 15 30 1 2 00 03 6B 00 00 01 2008 10 6 17 15 2008 10 6 18 00 1 4 00 E0 75 00 00 02 2008 10 6 18 15 2008 10 6 20 00 1 5 00 01 E3 01 02 03 20...

Page 1096: ...Local Port 1 1 Chassis ID Subtype MAC Address Chassis ID 00 E0 BB 00 00 11 Port ID Subtype Network Address Port ID 172 18 1 1 Create Time 10 6 2008 09 00 Remain Time 120 Seconds Index 2 Local Port 1 3...

Page 1097: ...g wac user username 15 vlan vlan_name 32 vlanid vlanid 1 4094 clear_vlan config wac authorization attributes radius enable disable local enable disable 1 config wac authentication_page element default...

Page 1098: ...Parameters None Restrictions Only Administrator Operator and Power User level users can issue this command Example To disable WAC DGS 3120 24TC admin disable wac Command disable wac Success DGS 3120...

Page 1099: ...be between 1 and 1440 minutes block_time Optional If a host fails to pass the authentication it will be blocked for a period specified by block_time sec 0 300 Enter the blocking time here This value...

Page 1100: ...ted to the default redirect path after successful authentication When the string is cleared the client will not be redirected to another URL after successful authentication Format config wac default_r...

Page 1101: ...rect URL DGS 3120 24TC admin config wac clear_default_redirpath Command config wac clear_default_redirpath Success DGS 3120 24TC admin 120 7 config wac virtual_ip Description This command is used to c...

Page 1102: ...mber for HTTPS is 443 If no protocol specified the protocol is HTTP The HTTP cannot run at TCP port 443 and the HTTPS cannot run at TCP port 80 Format config wac switch_http_port tcp_port_number 1 655...

Page 1103: ...ted hosts which will uses this user account to pass authentication vlan_name 32 Enter the name of the VLAN here This name can be up to 32 characters long vlanid Optional Specify the target VLAN ID for...

Page 1104: ...can be configured Format config wac user username 15 vlan vlan_name 32 vlanid vlanid 1 4094 clear_vlan Parameters user The user name to be configured username 15 Enter the username used here This name...

Page 1105: ...adius Optional If specified to enable the authorized data assigned by the RADUIS server will be accepted if the global authorization network is enabled The default state is enabled enable Specify that...

Page 1106: ...ge desc 32 Enter a description with maximum of 32 characters password_title Specify to configure the password title of the authentication page desc 32 Enter a description with maximum of 64 characters...

Page 1107: ...ate Disabled Method Local Redirect Path Virtual IP 0 0 0 0 Virtual IPv6 Switch HTTP Port 80 HTTP RADIUS Authorization Enabled Local Authorization Enabled Trap State Disabled DGS 3120 24TC admin 120 15...

Page 1108: ...120 1 2 Enabled 60 30 120 1 3 Enabled 120 60 120 DGS 3120 24TC admin 120 16 show wac user Description This command is used to show web authentication account Format show wac user Parameters None Restr...

Page 1109: ...VLAN ID is 20 and the assigned VLAN ID is 1234 in this example 3 MAC 00 00 00 00 00 03 failed to pass authentication the VID field will be shown as indicating that packets with SA 00 00 00 00 00 03 w...

Page 1110: ...nticating 10 1 2 00 00 00 00 00 10 P 2040 Authenticated 1234 2 1440 20 1 3 00 00 00 00 00 20 P 2045 Authenticating 5 1 3 00 00 00 00 00 21 P 2045 Blocked 100 Total Authenticating Hosts 2 Total Authent...

Page 1111: ...ed authenticating blocked macaddr macaddr Parameters ports Specify the list of ports whose WAC state will be cleared portlist Enter a list of ports used for the configuration here all Specify that all...

Page 1112: ...t config wac trap state enable disable Parameters enable Specify to enable the WAC trap state disable Specify to disable the WAC trap state Restrictions Only Administrators Operators and Power Users c...

Page 1113: ...cos class_id 0 7 profile default profile_id int 2 128 profile_name 32 weight int 0 15 profile default profile_id int 2 128 profile_name 32 weight int 0 15 delete wred profile profile_id int 2 128 pro...

Page 1114: ...global state DGS 3120 24TC admin disable wred Command disable wred Success DGS 3120 24TC admin 121 3 create wred profile Description This command is used to create a WRED profile Format create wred pr...

Page 1115: ...ify the yellow packets to be dropped red Optional Specify the red packets to be dropped min_threshold Specify the minimum threshold value used If the queue size is higher than this value then the colo...

Page 1116: ...s Specify the hardware priority queues class_id 0 7 Enter the priority between 0 and 7 profile Specify the profile to be used default Specify the default profile to be used profile_id Specify the prof...

Page 1117: ...arameters profile_id Specify the profile ID to be deleted int 2 128 Enter the profile ID between 2 and 128 profile_name 32 Specify the profile name to be delete all Specify all profiles to be delete R...

Page 1118: ...Class_ID Weight Profile_id Profile_Name 0 9 1 default 1 9 1 default 2 2 2 profilename 3 9 1 default 4 9 1 default 5 9 1 default 6 9 1 default 7 9 1 default Port 1 2 Class_ID Weight Profile_id Profile...

Page 1119: ...D profile information DGS 3120 24TC admin show wred profile Command show wred profile Total Profile Number 2 WRED Profile ID 1 Profile Name default Packet Type Min Threshold Max Threshold Max Drop Rat...

Page 1120: ...necessary for the user needs to attach a terminal or PC with terminal emulation to the console port of the Switch 2 Power on the Switch After the runtime image and UART init are loaded to 100 the Swi...

Page 1121: ...e Guide 1116 Command Parameters reset password username The reset password command resets the password of the specified user If a username is not specified the passwords of all users will be reset sho...

Page 1122: ...figuration and log saved to flash Unit unitID Configuration and log saved to flash by console Username username IP ipaddr Informational by console and IP ipaddr are XOR shown in log string which means...

Page 1123: ...and IP ipaddr are XOR shown in log string which means if user login by console there will no IP information for logging Log message successfully uploaded Log message successfully uploaded by console...

Page 1124: ...me username Warning There are no IP and MAC if login by console Logout through Console Unit unitID Logout through Console Username username Informational There are no IP and MAC if login by console Co...

Page 1125: ...InstanceID Informational Spannnig Tree instance deleted Spanning Tree instance deleted Instance InstanceID Informational Spanning Tree Version changed Spanning Tree version change new version new_vers...

Page 1126: ...rname username Warning Successful login through Web SSL authenticated by AAA local method Successful login through Web SSL from userIP authenticated by AAA local method Username username Informational...

Page 1127: ...e to AAA server timeout or improper configuration Username username Warning Successful login through Web SSL authenticated by AAA server Successful login through Web SSL from userIP authenticated by A...

Page 1128: ...authenticated by AAA local_enable method Username username Informational Enable Admin failed through Telnet authenticated by AAA local_enable method Enable Admin failed through Telnet from userIP auth...

Page 1129: ...d by AAA server serverIP Username username Informational Enable Admin failed through Web SSL authenticated by AAA server Enable Admin failed through Web SSL from userIP authenticated by AAA server ser...

Page 1130: ...client is authenticated by RADIUS server successfully This 802 1p default priority will be assigned to the port RADIUS server ipaddr assigned 802 1p default priority priority to port unitID portNum ac...

Page 1131: ...ational When a client host fails to authenticate WAC unauthenticated user User Name string IP ipaddr ipv6address MAC macaddr Port unitID portNum Warning The authorized user number on whole device reac...

Page 1132: ...cast storm cleared Port unitID portNum Multicast storm has cleared Informational Port shut down due to a packet storm Port unitID portNum is currently shut down due to a packet storm Warning Loop Back...

Page 1133: ...d MAC macaddr Warning Can not receive remote MEP s CCM packet CFM remote down MD Level mdlevel VLAN vlanid Local Port unitID portNum Direction mepdirection Warning Remote MEP s MAC reports an error st...

Page 1134: ...ation error Error when execute configuration filename line lineno at time time range Warning Schedule backup fail Backup type filename at time time range failure Warning Execute configuration success...

Page 1135: ...of one received VRRP advertisement message Authentication type mismatch on VR vr id at interface intf name Warning Authentication checking fail of one received VRRP advertisement message Authenticatio...

Page 1136: ...hen adding a virtual MAC into switch L3 table The box where the MAC is learned from is invalid Failed to add virtual IP vrrp ip addr MAC vrrp mac addr into L3 table Box id mac box is invalid Error Fai...

Page 1137: ...gViolationTrap When the IP MAC Binding trap is enabled if there s a new MAC that violates the pre defined port security configuration a trap will be sent out Binding 1 swIpMacBindingPortIndex 2 swIpMa...

Page 1138: ...Succ ess The trap is sent when a MAC based Access Control host is successfully logged in Binding 1 swMacBasedAuthInfoMacIndex 2 swMacBasedAuthInfoPortIndex 3 swMacBasedAuthVID 1 3 6 1 4 1 171 12 35 11...

Page 1139: ...rated Binding 1 swERPSNodeId 1 3 6 1 4 1 171 12 78 4 0 3 dot1agCfmFaultAlarm A MEP has a persistent defect condition A notification fault alarm is sent to the management entity with the OID of the MEP...

Page 1140: ...aved uploaded or downloaded Binding 1 unitID 2 agentCfgOperate 3 agentLoginUserName 1 3 6 1 4 1 171 12 1 7 2 0 9 swPowerFailure Power Failure notification Binding 1 swPowerUnitIndex 2 swPowerID 3 swPo...

Page 1141: ...swDdmPort 2 swDdmThresholdType 3 swDdmThresholdExceedType 4 swDdmThresholdExceedOrRecover 1 3 6 1 4 1 171 12 72 4 0 2 dot3OamNonThresholdEvent A dot3OamNonThresholdEvent notification is sent when a l...

Page 1142: ...n an agent role has detected that the ifOperStatus object for one of its communication links is about to enter the down state from some other state but not from the notPresent state This other state i...

Page 1143: ...t is generated when an alarm entry crosses its falling threshold and generates an event that is configured for sending SNMP traps Binding 1 alarmIndex 2 alarmVariable 3 alarmSampleType 4 alarmValue 5...

Page 1144: ...ed whenever the counter pimInvalidJoinPruneMsgsRcvd is incremented subject to the rate limit specified by pimInvalidJoinPruneNotificationPeriod Binding objects 1 pimGroupMappingPimMode 2 pimInvalidJoi...

Page 1145: ...2 swWACLoggedSuccess The trap is sent when a WAC client pass the authentication Binding objects 1 swWACAuthStatePort 2 swWACAuthStateOriginalVid 3 swWACAuthStateMACAddr 4 swWACAuthUserName 5 swWACClie...

Page 1146: ...Required Attribute Specific Field Used to assign the bandwidth of a port Unit Kbits Required If the user has configured the bandwidth attribute of the RADIUS server for example ingress bandwidth 1000K...

Page 1147: ...Server To use VLAN assignment RFC3580 defines the following tunnel attributes in RADIUS packets The table below shows the parameters for a VLAN RADIUS Tunnel Attribute Description Value Usage Tunnel T...

Page 1148: ...the requested VLAN To assign ACL by RADIUS Server the proper parameters should be configured on the RADIUS Server The table below shows the parameters for an ACL The parameters of the Vendor Specific...

Page 1149: ...refer to Appendix E RADIUS Attributes Assignment IETF standard RADIUS attributes are defined in the RFC 2865 Remote Authentication Dial In User Service RADIUS RFC 2866 RADIUS Accounting RFC 2868 RADIU...

Page 1150: ...ing Attributes Number IETF Attribute 1 User Name 4 NAS IP Address 5 NAS Port 6 Service Type 8 Framed IP Address 31 Calling Station ID 32 NAS Identifier 40 Acct Status Type 41 Acct Delay Time 42 Acct I...

Reviews:

No comments

Related manuals for xStack DGS-3120 Series

Brand: Ubisys Pages: 40

Brand: NETGEAR Pages: 15

GenReady Series 005448-2

Brand: Generac Power Systems Pages: 4

Brand: Omron Pages: 16

2X2 VGA SWITCHER

Brand: Gefen Pages: 12

Brand: Lindy Pages: 5

Brand: Black Box Pages: 4

Brand: Minicom DX Pages: 36

Brand: Lakeshore Pages: 82

Brand: I-Tech Pages: 19

Brand: Linkskey Pages: 2

Brand: Lancom Pages: 21

Brand: Racal Instruments Pages: 53

Brand: Gembird Pages: 11

Brand: Airlinkplus Pages: 2

Brand: Advantech Pages: 209

Brand: EGig Pages: 10

Brand: Paralan Pages: 45

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands